omni-providers
Pass
Audited by Gen Agent Trust Hub on Aug 20, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill documents endpoints for a local API server (localhost:20128) designed to manage provider connections, API keys, and OAuth flows. Using localhost ensures that sensitive operations remain within the local environment.
- [SAFE]: Authentication is managed using the
OMNIROUTE_TOKENenvironment variable rather than hardcoded credentials, which aligns with security best practices. - [SAFE]: The functionality to import local credentials (e.g., from the Antigravity CLI) is a documented feature of the provider management system and does not involve exfiltration to external domains.
- [SAFE]: No prompt injection attempts, obfuscation, or remote code execution patterns were detected in the instructions or example commands.
Audit Metadata