omh-application-threat-model Eval report.

Task wording matches this skill metadata.

• Evaluate omh-application-threat-model before installing it in an agent workflow
• security
• Browser automation workflows; Claude Code teams; teams that value GitHub adoption signals

Install handoff is available.

• npx skills add rlaope/oh-my-hermes --skill omh-application-threat-model

standard package or runtime install path

• npx skills add rlaope/oh-my-hermes --skill omh-application-threat-model

Good trust signals with a few areas worth checking before rollout.

• Strong shortlist
• 2.9K GitHub stars
• MIT

Needs review

• Permission surface may require sandboxing

Sparse or mixed signals. Useful for discovery, but not for autonomous installation.

• Test manually in an isolated workspace and compare against safer alternatives.
• High-risk permission hints: Secrets or environment access

MIT

• MIT

secrets or environment access, filesystem or document access

• Network access: medium
• Filesystem access: medium
• Secrets or environment access: high