omniroute-mcp
Fail
Audited by Gen Agent Trust Hub on Sep 5, 2026
Risk Level: HIGHEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill configuration instructions for Claude Desktop include running
npx -y omniroute --mcp. This command downloads theomniroutepackage from the public npm registry and executes it without prior user review of the package content. The package is not associated with a trusted vendor. - [EXTERNAL_DOWNLOADS]: The skill references and directs users to download configuration files and documentation from an unverified external GitHub repository (
github.com/diegosouzapw/OmniRoute). - [COMMAND_EXECUTION]: The skill provides shell command arguments (
-y,omniroute,--mcp) to be executed by the host agent environment for setting up the Model Context Protocol (MCP) server.
Recommendations
- AI detected serious security threats
Audit Metadata