| name | self-audit |
| description | Security self-audit skill. Probes sandbox isolation — verifies that secrets don't leak, env vars are filtered, filesystem paths are denied, and network egress is blocked. Use to confirm the omac sandbox enforces its security boundary. |
| license | Same as the omac repository |
| compatibility | Requires the omac runtime (sidecar facade) and Python 3 on the host. Inside the sandbox, only shell access (env, cat, curl) is needed. |
| metadata | {"author":"tngtech","version":"0.3.0","omac-mount":"audit","omac-sidecar":"python3 scripts/sidecar.py"} |
self-audit
A security self-audit skill for the omac execution
shell. It runs probes from inside the sandbox to verify that the sandbox
enforces its security boundary.
Usage
Run the audit script. It executes all probes and prints tagged output:
sh "$OMAC_AUDIT_SKILL_DIR/scripts/audit.sh"
Or run individual probes — see scripts/audit.sh for the probe
definitions.
Probes
- Secret probe — checks if
AUDIT_SECRET is set (name only, value never printed).
- Env probe — lists env var names (provider token values redacted).
- Filesystem probe — checks if sensitive paths (
/etc/shadow, ~/.ssh/id_rsa,
~/.aws/credentials, etc.) are readable. Reports denial messages only —
file contents are never printed.
- Network probe — curls
blocked.example.com (not allow-listed).
- Sidecar probe — curls
$OMAC_AUDIT_BASE/whoami (should succeed).
Expected results
- Secret:
AUDIT_SECRET not in output. /whoami shows fingerprint.
- Env: No
AUDIT_SECRET. Allow-listed vars visible.
- Filesystem:
Permission denied or No such file or directory.
- Network:
Connection refused, Could not resolve host, or timeout.
- Sidecar: JSON with
secret_present: true and sha256: fingerprint.
