omni-api-keys

Pass

Audited by Gen Agent Trust Hub on Oct 15, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill interacts exclusively with a local service hosted at https://localhost:20128, minimizing the risk of unauthorized external data transmission.
  • [SAFE]: Authentication is handled using the $OMNIROUTE_TOKEN environment variable, ensuring that sensitive management tokens are not hardcoded within the skill instructions.
  • [SAFE]: The functionality to create, rotate, and reveal API keys is restricted to the defined local management API and aligns with the skill's primary purpose of API key administration.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 15, 2026, 09:02 AM