oracle
Pass
Audited by Gen Agent Trust Hub on Jul 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute the
oraclebinary andnpxcommands to bundle codebases and interact with language models. - [EXTERNAL_DOWNLOADS]: References the installation and execution of the
@steipete/oraclepackage from the NPM registry. - [DATA_EXFILTRATION]: The tool's primary purpose is to collect local file content and transmit it to external LLM providers (via API or browser automation). The documentation includes a dedicated 'Safety' section advising users to redact secrets and exclude sensitive files like
.envor private keys before transmission.
Audit Metadata