omc-setup
Pass
Audited by Gen Agent Trust Hub on Apr 24, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes various bash scripts and inline Node.js logic to manage the installation lifecycle, detect versions, and clear plugin caches. This includes executing locally bundled scripts like setup-claude-md.sh and setup-progress.sh.
- [EXTERNAL_DOWNLOADS]: It retrieves the latest version of the CLAUDE.md instruction file from the vendor's official GitHub repository (Yeachan-Heo/oh-my-claudecode) to ensure the agent has the most current directives.
- [REMOTE_CODE_EXECUTION]: It performs a global installation of the oh-my-claude-sisyphus npm package from the public registry. This package, authored by the vendor, provides necessary CLI tools for the plugin's extended functionality.
- [DATA_EXFILTRATION]: The skill reads and modifies critical configuration files, such as ~/.claude/settings.json and ~/.claude/CLAUDE.md, to enable experimental agent teams and set default execution modes. While it handles configuration data, it does not transmit sensitive user secrets to external entities.
Audit Metadata