omni-content-builder
Pass
Audited by Gen Agent Trust Hub on May 19, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill primarily consists of instructional documentation and shell command templates for interacting with the Omni Analytics API. No malicious patterns, obfuscation, or unauthorized access attempts were detected.
- [COMMAND_EXECUTION]: Uses standard
curlcommands for API interactions. These operations are scoped to the user-provided$OMNI_BASE_URLand are consistent with the skill's stated purpose of document and dashboard management. - [DATA_EXPOSURE]: The skill correctly instructs users to manage sensitive information via environment variables (
OMNI_API_KEY). It does not contain hardcoded secrets or attempt to access sensitive local system files (e.g., SSH keys, AWS credentials). - [INDIRECT_PROMPT_INJECTION]: The skill includes workflows for reading existing dashboard configurations from the API to use as templates. While this involves ingesting external data into the agent's context, the source is the user's own authenticated API endpoint, which is a controlled environment.
Audit Metadata