omega-gemini-cli
Audited by Socket on Mar 3, 2026
1 alert found:
SecurityThe Omega Gemini CLI skill is coherently aligned with its stated purpose: a headless Gemini-based analysis wrapper that accepts prompts (and embedded file content) and returns machine-readable JSON. It relies on an external Gemini CLI, which introduces standard supply-chain data-flow considerations (external service, OAuth flow, network use). There are no evident credential harvesting or malicious behaviors within the fragment itself; the risk is mainly data exposure to an external AI service and dependence on a third-party CLI. Overall, the design is plausible and proportionate to its stated purpose, with moderate security cautions around external data flow and data retention by the Gemini service.