omni-mcp
Pass
Audited by Gen Agent Trust Hub on Oct 10, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references documentation and setup files from the author's GitHub repository and provides instructions for running the
omniroutepackage vianpx.\n- [COMMAND_EXECUTION]: Provides configuration examples that execute the MCP server locally vianpxand demonstrates API interactions usingcurlwith shell variables.\n- [DYNAMIC_EXECUTION]: Includes tools that allow for the dynamic registration and invocation of additional skills at runtime (skill_register,skill_invoke).\n- [INDIRECT_PROMPT_INJECTION]:\n - Ingestion points: The agent processes data returned by 110 different tools and retrieves information through
memory_searchoperations (SKILL.md).\n - Boundary markers: No explicit delimiters or instructions to disregard embedded commands are included in the skill definition.\n
- Capability inventory: The skill possesses high-privilege capabilities, including memory modification (
memory_add,memory_delete), skill lifecycle management, and administrative health checks for the underlying database (SKILL.md).\n - Sanitization: There is no evidence of sanitization or validation of data received from the external MCP server's tool outputs.
Audit Metadata