omh-morning-brief
Pass
Audited by Gen Agent Trust Hub on Nov 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements a strict policy for handling credentials, explicitly directing the agent to use secure entry mechanisms or user-side OAuth setup instead of requesting secrets within the chat environment.
- [SAFE]: A principle of least privilege is enforced by restricting mail and calendar access to read and draft-only scopes. The instructions specifically forbid enabling 'Send' permissions, providing detailed warnings about scope limitations for Gmail and Microsoft 365.
- [SAFE]: Configuration modifications follow a 'diff-approved apply' workflow, where changes are shown to the user with redacted placeholders for sensitive data and only applied after explicit authorization.
- [COMMAND_EXECUTION]: The skill uses the
omhcommand-line tool (omh runtime record) for managing workflow status and recording progress. These operations are consistent with the skill's purpose as a setup and automation guide within the vendor's ecosystem.
Audit Metadata