omh-frontend
Pass
Audited by Gen Agent Trust Hub on Nov 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute a linting command using a package from a trusted organization. Specifically, it mentions running
npx -y @google/design.md lint DESIGN.mdto validate design system contracts in the DESIGN.md file. This is a standard development practice for ensuring schema compliance. - [COMMAND_EXECUTION]: The skill references the use of vendor-specific CLI tools, such as
omh design dataandomh runtime record. These tools are used for retrieving local design tokens and recording workflow progress within the Oh-My-Hermes environment. - [EXTERNAL_DOWNLOADS]: The skill documentation references several well-known and reputable third-party UI registries and libraries, including shadcn/ui, Magic UI, Aceternity UI, and GSAP. It provides guidance on reviewing these components for accessibility and performance before adoption, which aligns with secure development best practices.
Audit Metadata