skills/rheinmir/skills-kit/skill/Gen Agent Trust Hub

skill

Pass

Audited by Gen Agent Trust Hub on Sep 6, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPERSISTENCECREDENTIALS_UNSAFEDYNAMIC_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: Several utility and diagnostic skills (e.g., omc-doctor, omc-setup) fetch resources, such as the CLAUDE.md configuration file, from the project's official repository at github.com/Yeachan-Heo/oh-my-claudecode to ensure local configurations are synchronized with the latest version.
  • [COMMAND_EXECUTION]: The framework uses the agent's shell access to perform Git operations, manage Docker containers, and handle project state through various CLI tools. These actions are standard for an automated development assistant and are triggered by user-invoked commands.
  • [CREDENTIALS_UNSAFE]: To enable real-time alerts, the configure-notifications skill interactively collects Telegram bot tokens, Discord webhook URLs, and Slack webhook URLs. These are stored locally in the agent's designated configuration folder (~/.gemini/antigravity/.omc-config.json) to enable the notification feature. The skill includes a test feature that uses curl to verify these credentials with their respective official service providers.
  • [PERSISTENCE]: The hud skill establishes a persistent Heads-Up Display by modifying the agent's settings.json to include a statusLine command and by creating a local executable loader script. This allows the tool's HUD to persist across different working sessions.
  • [DYNAMIC_EXECUTION]: The tool includes a setup wizard for MCP servers that utilizes npx to install and run tools from the npm registry. Additionally, the HUD status line uses a dynamic import pattern to load core plugin logic from local cache or developer directories.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 6, 2026, 12:17 PM