ReadMe
Security checks across malware telemetry and agentic risk
Overview
This skill is a disclosed ReadMe connector that can read, create, update, and delete ReadMe project content, with explicit confirmation guidance for changes and deletes.
Install this only if you intend to let an OOMOL-connected account operate your ReadMe project. Review the exact payload before create or update actions, give explicit approval only for the specific item you want deleted, and use the first-time oo CLI installer or login flow only if you trust OOMOL and need to set up the connector.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
64/64 vendors flagged this skill as clean.
