omni
Fail
Audited by Snyk on Aug 17, 2026
Risk Level: CRITICAL
Full Analysis
CRITICAL E005: Suspicious download URL detected in skill instructions.
- Suspicious download URL detected (high risk: 0.80). The release URL points to a personal GitHub account's release archive that serves binaries (a common vector for malware distribution and flagged as higher risk), while the issues page is just documentation and not itself a download.
MEDIUM W013: Attempt to modify system services in skill instructions.
- Attempt to modify system services in skill instructions detected (high risk: 1.00). This skill instructs installing and running "omni" which will "configure the host it is running inside" and write hooks into the host's configuration (modifying files and restarting the host), so it directly pushes the agent to change the machine's state.
Issues (2)
E005
CRITICALSuspicious download URL detected in skill instructions.
W013
MEDIUMAttempt to modify system services in skill instructions.
Audit Metadata