lokei
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFECOMMAND_EXECUTIONPRIVILEGE_ESCALATIONPERSISTENCEEXTERNAL_DOWNLOADSDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
Bashtool to run thelokeiCLI for various development tasks, including running projects, sharing tunnels, and diagnosing network health.\n- [PRIVILEGE_ESCALATION]: Thelokei setupcommand performs system-level modifications, such as generating and trusting a local Certificate Authority (CA) in the OS keychain, configuring DNS resolvers in/etc/resolver/, and setting up network port forwarding usingpfctl(macOS) oriptables(Linux). These operations require elevated permissions.\n- [PERSISTENCE]: The skill provides access tolokei service install, which configures the tool to run as a persistent background service usinglaunchdorsystemd, ensuring it starts automatically on system boot.\n- [EXTERNAL_DOWNLOADS]: The skill instructions suggest installing thelokeiutility via the global NPM package registry (npm i -g lokei) if the tool is not already detected on the system.\n- [DATA_EXFILTRATION]: Thelokei shareandlokei run --exposecommands establish public tunnels torelay.lokei.dev, which routes local service traffic through external infrastructure to allow remote access.
Audit Metadata