opencli-usage — security audits

Review recommended

Independent security partners scan this skill's files for malicious content, prompt injection and risky patterns. Verdicts below come from the skills.sh audit program; each partner links to its full report.

• Gen Agent Trust Hub

  warn

  This skill provides documentation and an interface for OpenCLI, a tool that automates interactions with websites and applications. It includes powerful capabilities such as installing third-party plugins from GitHub, executing external command-line tools, and accessing browser session cookies. These features introduce risks of remote code execution and sensitive data exposure if the tool is used to process content or plugins from untrusted sources.

  Risk: MEDIUMREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONDATA_EXFILTRATIONEXTERNAL_DOWNLOADSPROMPT_INJECTIONMay 19, 2026Full report

• Socket

  warn

  1 alert: gptAnomaly

  May 19, 2026Full report

• Snyk

  warn

  Risk: MEDIUM · 1 issue

  Risk: MEDIUMMay 19, 2026Full report

• ZeroLeaks

  pass

  Score: 93/100 · 2 sections analyzed

  Risk: NONEApr 16, 2026Full report