onboard
Facilitates remote setup of a colleague's Mac with necessary tools via SSH, ensuring a smooth onboarding process.
Install this skill
or
67/100
Security score
The onboard skill was audited on May 21, 2026 and we found 7 security issues across 3 threat categories, including 1 high-severity. Review the findings below before installing.
Categories Tested
Security Issues
medium line 53
Curl to non-GitHub URL
SourceSKILL.md
| 53 | ssh "$SSH_TARGET" 'curl -sf -m 5 https://www.google.com -o /dev/null && echo ok' |
medium line 79
Curl to non-GitHub URL
SourceSKILL.md
| 79 | proxy() { curl -sf -m 5 https://www.google.com -o /dev/null && echo true || echo false; } |
high line 38
Prompting for password/secret input
SourceSKILL.md
| 38 | - `$REMOTE_SUDO_PW`: the colleague's account password, exported as an environment variable in the operator's shell **before** `/onboard` runs. Reference it as `"$REMOTE_SUDO_PW"` in commands; never ec |
medium line 48
Prompting for password/secret input
SourceSKILL.md
| 48 | # 1. SSH key auth works (no password prompt) |
low line 53
External URL reference
SourceSKILL.md
| 53 | ssh "$SSH_TARGET" 'curl -sf -m 5 https://www.google.com -o /dev/null && echo ok' |
low line 79
External URL reference
SourceSKILL.md
| 79 | proxy() { curl -sf -m 5 https://www.google.com -o /dev/null && echo true || echo false; } |
low line 173
External URL reference
SourceSKILL.md
| 173 | url=$(echo "$pane" | grep -oE 'https://[^[:space:]]+claude\.ai/oauth/[^[:space:]]+' | head -n1) |
Scanned on May 21, 2026
View Security Dashboard