The Agent Skills Directory

[PERSISTENCE]: The omniroute autostart enable command registers the application to start automatically on system boot by creating systemd units (Linux), LaunchAgents (macOS), or Registry entries (Windows).
[DATA_EXFILTRATION]: The omniroute tunnel create commands allow exposing a local server instance to the public internet via Cloudflare, Tailscale, or ngrok. If used without proper authorization, this can be used to exfiltrate data or bypass internal network protections.
[CREDENTIALS_UNSAFE]: The skill documentation encourages passing sensitive information like admin-password and api-key directly as command-line arguments, which can lead to credentials being logged in the shell's command history. Additionally, commands like omniroute env show and omniroute env get can expose these secrets in plain text.
[EXTERNAL_DOWNLOADS]: The skill references an external repository for installation instructions and suggests downloading third-party binaries such as cloudflared from external sources.
[COMMAND_EXECUTION]: The skill provides instructions for powerful administrative commands, including omniroute reset-encrypted-columns --force, which can destroy or modify database content, and omniroute update, which facilitates software updates from remote sources.
[REMOTE_CODE_EXECUTION]: The omniroute update command triggers a process to fetch and install new software versions from a remote source, representing a potential remote code execution vector.

omniroute-cli-admin