FlamingHalapeno opened omacom/omarchy-plugin-marketplace#13038 for a replacement network widget with saved-profile settings and optional automatic roaming to higher-priority networks. The submission remains open. github-actions[bot] reported structural compatibility and an automated security baseline pass, each with a limited scope.
HANCORE-linux subsequently reported that raw network-name output could inject a record into the roaming scan and trigger Bash evaluation. Under the stated roaming and saved-profile conditions, the finding describes command execution as the desktop user by a nearby attacker without joining the attacker's network. The supplied review therefore identifies a concrete security problem beyond what the automated baseline detected.
