Security audit
Security checks for vulnerabilities and agentic risk
The airfocus workflow is coherent, but its automatic setup can execute unverified remote code without a separate installation approval.
Review and approve CLI installation separately, including any changes to installed agent skills; prefer a pinned, verified release. OOMOL mediates access to your connected airfocus account, so limit its permissions and confirm exact writes and deletions. The remote installer and hosted connector implementation were unavailable for review.
The supplied code executes an installer hosted on an unrelated domain rather than performing any visible airfocus operation. Nothing in the supplied chunk establishes this installation as a supporting implementation detail for airfocus. The downloaded script's contents and further effects are not available for assessment.
Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.
- `create_item` — Create an item in an airfocus workspace. [write]
- `delete_item` — Permanently delete an item from an airfocus workspace. [destructive]
- `get_item` — Get one item from an airfocus workspace by ID.
- `get_profile` — Get the profile associated with the connected airfocus personal access token.
- `get_workspace` — Get one airfocus workspace by ID.
- `search_items` — Search items in an airfocus workspace with optional filter and sort criteria.
- `search_workspaces` — Search airfocus workspaces with optional archived, filter, and sort criteria.
Piping a mutable remote installer directly into bash executes its contents without version pinning or independent integrity verification; the PowerShell alternative has the same issue. HTTPS protects transport but does not protect against a compromised distribution endpoint or malicious installer update, which could execute arbitrary code with the user's permissions.
oo: command not found — install the oo CLI (other platforms: https://cli.oomol.com/install-guide.md):
curl -fsSL https://cli.oomol.com/install.sh | bash # macOS / Linux
The fallback directs the agent to install software by executing a remote script without first explaining local system changes or obtaining installation-specific approval. Although triggered only when the CLI is missing, this expands an airfocus data task into local code execution with the invoking user's permissions; the airfocus write-confirmation rules do not cover this setup operation.
Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.
- **`OOMOL_INSUFFICIENT_CREDIT`** — OOMOL billing stop. Recharge at `https://console.oomol.com/billing/token-recharge` before retrying.
- **HTTP 402 without `OOMOL_INSUFFICIENT_CREDIT`** — the third-party account itself has no active plan or credit. Report the provider error message as is; do not ask the user to recharge OOMOL.
## Resources