Omahub
← All plugins
Y

OmaNetHub

by Yashwanth

Unified Network Hub for Wi-Fi, Tailscale and Firewall

GitHub

Security review

Review recommended · 3 findings

Deterministic scan — not a security guarantee

Medium
Risk level
Medium
Analyzed commit
9d976a2
Scanned
1 week ago
  • medium sudo action.sh:200

    Command runs with sudo, elevating the process beyond the plugin environment.

    sudo ufw status verbose" &
  • medium sudo Panel.qml:1670

    Command runs with sudo, elevating the process beyond the plugin environment.

    sudo ufw allow)"
  • Docs external_hosts README.md:90

    Downloads or connects to an external HTTP(S) host.

    git clone https://github.com/yashwk/OmaNetHub.git ~/.config/omarchy/plugins/yashwanth.link

Automated analysis only — not a security guarantee.

AI advisory review

No obvious issues detected

Language-model assessment · ~deepseek/deepseek-v4-flash-latest — advisory only

Low
AI risk level
Low
Recommendation
install
Model
~deepseek/deepseek-v4-flash-latest
Analyzed commit
9d976a2
Reviewed
1 week ago

OmaNetHub is a legitimate network, Tailscale, and UFW management widget. The deterministic scan's medium rating is overstated: the external-host finding is the README's install command, and the sudo findings correspond to user-initiated firewall actions that are expected for this plugin's purpose. No obfuscation, hidden persistence, credential theft, or destructive install-time behavior was found in the sampled code.

  • The plugin intentionally invokes sudo for UFW operations (e.g., `sudo ufw status verbose`, `sudo ufw allow`), but these are triggered by explicit user actions in the UI, not automatic privilege escalation.
  • The external-host finding refers to the README's `git clone` / `omarchy plugin add` installation instructions, which are documentation only.
  • The plugin has broad control over network, firewall, and Tailscale state; all such actions are user-initiated and consistent with the advertised functionality.
How this check works

This review combines the deterministic scan (the rule-based results above) with an independent look at the plugin's code by a language model. The model reads a trimmed sample of the repository's files, the manifest, and the README, then gives a plain-language risk level and a recommendation: install (no notable danger), review (look closer first), or avoid (clearly dangerous).

It runs on the same analyzed commit as the deterministic scan and is strictly advisory — it is not a security guarantee and never blocks a plugin by itself. A human moderator still reviews plugins before they are listed.

AI advisory only — automated analysis, not a security guarantee.

Install
$ omarchy plugin add https://github.com/yashwk/OmaNetHub --enable
System #bar #system

OmaNetHub — Omarchy Network Hub

Unified Network, Tailscale, and Firewall management plugin for Omarchy.

Combines Wi-Fi controls, DNS/band management, signal & latency diagnostics, Tailscale peer browsing with Taildrop file sharing, and UFW firewall management — in a single bar widget.

Screenshots

Network Tailnet Firewall
Network Tab Tailnet Tab Firewall Tab
<details> <summary>View individual tabs</summary>

Network Tab

Network Tab

Tailnet Tab

Tailnet Tab

Firewall Tab

Firewall Tab

</details>

Features

Network

  • Wi-Fi radio toggle, restart, and QR code (via omarchy.wifiqr)
  • Wi-Fi discovery when offline: nearby networks with signal, security, and saved-state badges, auto-connect to known networks, inline password entry with error reporting, rescan and disconnect actions
  • Connected SSID, interface, frequency/band, signal strength, bitrate, and latency (router + internet ping via omarchy-network-status)
  • Local IP / gateway display with one-click copy to clipboard (wl-copy)
  • Wi-Fi band steering: Auto / 2.4 GHz / 5 GHz (via omarchy-network-band)
  • DNS provider presets: DHCP, Cloudflare, Google, Mullvad, Custom (via omarchy-dns)
  • Daily data usage (Down/Up via vnstat or /proc/net/dev)
  • Speed test summon (via omarchy.speedtest)

Tailnet (Tailscale)

  • Status card for this device: hostname, Tailscale IP, OS icon, online indicator, toggle (tailscale up / down)
  • Peer list from tailscale status --json with OS icons, IP, DNS name, online state
  • Exit node management: active exit node with one-click disconnect, available exit nodes switchable from peer cards
  • Copy actions: IPv4, hostname, or DNS name per peer
  • Taildrop file sharing:
    • Per-peer send button (opens file picker if no files pre-selected)
    • Drag & drop files onto the bar icon or anywhere in the panel
    • Auto-send when only one online peer exists, otherwise peer picker
  • Admin console shortcut (https://login.tailscale.com/admin/machines)

Firewall (UFW)

  • UFW status card: active/inactive, rule count, enable/disable toggle
  • Allowed incoming rules list (parsed from /etc/ufw/user.rules) with per-rule close action
  • Open a port: port number + TCP/UDP chip, with quick presets (22, 80, 3000, 5173, 8080)
  • View verbose status in floating terminal

Nautilus Integration (Optional)

  • Send via Taildrop context menu for GNOME Files (Nautilus). Right-click any file(s) → Send via Taildrop → choose online peer.
  • Explicit installation & removal scripts provided in bin/:
    • Install: ~/.config/omarchy/plugins/yashwanth.link/bin/install-nautilus-extension
    • Uninstall: ~/.config/omarchy/plugins/yashwanth.link/bin/uninstall-nautilus-extension

Installation

omarchy plugin add https://github.com/yashwk/OmaNetHub.git

The plugin is installed to ~/.config/omarchy/plugins/yashwanth.link/ as a git checkout.

Then enable and place it:

omarchy plugin enable yashwanth.link
omarchy bar move yashwanth.link --section right
# or enable via Omarchy menu → Setup → Plugins

To update later:

omarchy plugin update yashwanth.link
# or update all
omarchy plugin update

Manual install

  1. Clone to ~/.config/omarchy/plugins/yashwanth.link/: 
    git clone https://github.com/yashwk/OmaNetHub.git ~/.config/omarchy/plugins/yashwanth.link
  2. omarchy-shell shell rescanPlugins
  3. omarchy plugin enable yashwanth.link

Usage

Bar icon

The widget shows signal/network state (󰤨 / 󰤥 / 󰤟 / 󰈀 for wired, 󰤮 when offline) in the bar. Click to open the three-tab panel (Network / Tailnet / Firewall). The tab bar shows badges: signal %, peer count, or UFW rule count.

Drag & Drop (Taildrop)

  • Drag file(s) over the bar icon — the panel auto-opens to Tailnet with a drop target.
  • Drop files onto a peer row inside the panel to send directly to that peer.
  • Drop files onto the panel overlay — if one online peer, sends immediately; if multiple, pick the target device; choose Cancel to abort.

Behind the scenes, sends use tailscale file cp via bin/taildrop-direct-send and bin/taildrop-menu-send (with omarchy-file-select / omarchy-menu-select helpers).

Nautilus Context Menu

To install or remove the "Send via Taildrop" right-click extension in Nautilus:

  • Install: 
    ~/.config/omarchy/plugins/yashwanth.link/bin/install-nautilus-extension
nautilus -q
  • Remove: 
    ~/.config/omarchy/plugins/yashwanth.link/bin/uninstall-nautilus-extension
nautilus -q

Requirements

  • Omarchy shell (omarchy-shell / Quickshell) — omarchy plugin and omarchy-shell shell summon helpers
  • tailscale CLI (for Tailnet tab; optional otherwise) — tailscale status --json
  • jq (parsing tailscale JSON in status.sh)
  • wl-copy (clipboard copy)
  • nmcli / NetworkManager (network state, optional helpers: omarchy-network-status, omarchy-network-band, omarchy-dns, omarchy-wifiqr, omarchy.speedtest)
  • vnstat (optional, nicer daily usage; falls back to /proc/net/dev)
  • ufw (optional, Firewall tab)
  • xdg-open (admin console link)
  • GNOME Files + nautilus-python (optional, for context menu)

All dependencies are soft — tabs degrade gracefully when tools are missing.

Configuration

No extra config required. The widget persists as yashwanth.link in ~/.config/omarchy/shell.json under bar.layout.right once enabled.

To customize position:

omarchy bar move yashwanth.link --section center

License

MIT — see LICENSE