菜单
Security self-audit skill. Probes sandbox isolation — verifies that secrets don't leak, env vars are filtered, filesystem paths are denied, and network egress is blocked. Use to confirm the omac sandbox enforces its security boundary.
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
Author a new skill for the omac (oh-my-agentic-coder) execution shell — the agentskills.io SKILL.md plus omac's omac.yaml sidecar contract, the OMAC_* environment variables, the Unix-socket/loopback REST facade, secrets and mounts, install scripts, and the harness-agnostic rules. Use this when the user wants to create, scaffold, or package an omac skill (not a generic Claude/agentskills skill): "write an omac skill", "add a sidecar skill", "package this as an omac skill", "how do omac.yaml mounts/secrets work". Not for authoring non-omac skills.
Smoke-test REST interface backed by an out-of-sandbox HTTP sidecar. Exercises every transport and feature of the omac facade — JSON round-trip on POST /echo, secret-injection proof on GET /whoami, and a Server-Sent Events stream on GET /tick. Use when you want to verify the omac plumbing end-to-end (Unix socket + loopback TCP, SSE pass-through, env-var injection, config field types) before wiring a real third-party API skill.
| name | self-audit |
| description | Security self-audit skill. Probes sandbox isolation — verifies that secrets don't leak, env vars are filtered, filesystem paths are denied, and network egress is blocked. Use to confirm the omac sandbox enforces its security boundary. |
| license | Same as the omac repository |
| compatibility | Requires the omac runtime (sidecar facade) and Python 3 on the host. Inside the sandbox, only shell access (env, cat, curl) is needed. |
| metadata | {"author":"tngtech","version":"0.3.0","omac-mount":"audit","omac-sidecar":"python3 scripts/sidecar.py"} |
A security self-audit skill for the omac execution shell. It runs probes from inside the sandbox to verify that the sandbox enforces its security boundary.
Run the audit script. It executes all probes and prints tagged output:
sh "$OMAC_AUDIT_SKILL_DIR/scripts/audit.sh"
Or run individual probes — see scripts/audit.sh for the probe
definitions.
AUDIT_SECRET is set (name only, value never printed)./etc/shadow, ~/.ssh/id_rsa,
~/.aws/credentials, etc.) are readable. Reports denial messages only —
file contents are never printed.blocked.example.com (not allow-listed).$OMAC_AUDIT_BASE/whoami (should succeed).AUDIT_SECRET not in output. /whoami shows fingerprint.AUDIT_SECRET. Allow-listed vars visible.Permission denied or No such file or directory.Connection refused, Could not resolve host, or timeout.secret_present: true and sha256: fingerprint.