tl-openmeter-local-dev
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill guides the user to install ngrok via official package managers (Chocolatey or Homebrew). Ngrok is a well-known and recognized service for local webhook development.
- [REMOTE_CODE_EXECUTION]: The instructions involve running local TypeScript scripts (e.g., scripts/openmeter/openmeter-catalog-sync.ts) using npx tsx to automate setup tasks. These operations are performed within the local developer workspace using scripts associated with the repository.
- [INDIRECT_PROMPT_INJECTION]: The skill uses interactive questions via the AskQuestion tool to tailor the setup process to the user's needs. This input determines the sequence of local configuration steps and does not interact with sensitive system operations or external network endpoints in an unsafe manner.
Audit Metadata