OmniPublishv2.0

• Risk level: Low
• Analyzed: Apr 15, 2026, 4:48 PM
• Findings: 0
• Version: 2.0.0

Overview

The skill is internally consistent with its stated purpose (a local OmniPublish launcher) and does what it says: it bootstraps a local FastAPI+Vue app, but it will modify files outside the skill folder, install packages, and expose a default admin account — so review before running.

This skill is a local app launcher and appears to be what it claims, but it will: 1) create a venv and pip-install packages (downloads from PyPI), 2) run npm install/build (downloads from npm), 3) create files and logs three levels above the skill directory (project root) and run a background server on 127.0.0.1:9527, and 4) ships a default admin/admin123 credential. Before installing: inspect the backend/requirements.txt and the backend/frontend code (or the linked GitHub repo), ensure you are comfortable with files being created outside the skill folder, run behind a firewall (the app binds to localhost by default), change the default admin password after startup, and be aware the brew-only install path is macOS-focused — on Linux/Windows you must ensure python/node/ffmpeg are present manually.