oracle
Warn
Audited by Gen Agent Trust Hub on Aug 1, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill's metadata specifies the installation of an external package
@steipete/oraclefrom the npm registry. - [REMOTE_CODE_EXECUTION]: Instructions include the use of
npx -y @steipete/oracle, which automatically downloads and executes the package's code from the internet without manual confirmation. - [COMMAND_EXECUTION]: The skill provides instructions for executing the
oraclebinary with various flags, including aservecommand that opens a network port (0.0.0.0:9473) for remote access, and references to non-existent model versions ('GPT-5.2 Pro') which may indicate misleading metadata.
Audit Metadata