oma-dev-workflow
Pass
Audited by Gen Agent Trust Hub on May 3, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches the installation script for the mise task runner from its official domain (https://mise.run).
- [REMOTE_CODE_EXECUTION]: Executes the downloaded mise installation script by piping it directly to the shell (
curl https://mise.run | sh). - [COMMAND_EXECUTION]: Modifies the user's shell profile (
~/.zshrc) to include mise activation commands, which is a standard persistence mechanism for environment management tools. - [COMMAND_EXECUTION]: Automates the creation of Git hooks (
commit-msg,pre-commit,pre-push) by writing shell scripts directly into the.git/hooks/directory. - [COMMAND_EXECUTION]: Invokes various external development tools including
docker composefor infrastructure management andgitfor repository operations. - [REMOTE_CODE_EXECUTION]: Uses
bunxanduvto dynamically download and execute Node.js and Python packages at runtime for tasks such as linting, API generation, and database migrations.
Audit Metadata