Chargebee
Security checks across malware telemetry and agentic risk
Overview
This Chargebee skill is a clearly scoped connector skill, but users should understand that it can access billing/customer data and create customers through an OOMOL account.
Install only if you trust OOMOL and want Codex to use your connected Chargebee account. Review read requests because they may expose customer, invoice, and subscription data, and require explicit confirmation before any customer-creation action.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
64/64 vendors flagged this skill as clean.
