oma-dev-workflow

Pass

Audited by Gen Agent Trust Hub on May 3, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: Fetches the installation script for the mise task runner from its official domain (https://mise.run).
  • [REMOTE_CODE_EXECUTION]: Executes the downloaded mise installation script by piping it directly to the shell (curl https://mise.run | sh).
  • [COMMAND_EXECUTION]: Modifies the user's shell profile (~/.zshrc) to include mise activation commands, which is a standard persistence mechanism for environment management tools.
  • [COMMAND_EXECUTION]: Automates the creation of Git hooks (commit-msg, pre-commit, pre-push) by writing shell scripts directly into the .git/hooks/ directory.
  • [COMMAND_EXECUTION]: Invokes various external development tools including docker compose for infrastructure management and git for repository operations.
  • [REMOTE_CODE_EXECUTION]: Uses bunx and uv to dynamically download and execute Node.js and Python packages at runtime for tasks such as linting, API generation, and database migrations.
Audit Metadata
Risk Level
SAFE
Analyzed
May 3, 2026, 09:10 AM