Security audit
Security checks for vulnerabilities and agentic risk
The map features match the description, but automatic setup executes unverified downloaded code and may install additional agent skills.
Review and install a verified, pinned CLI release before use, and check which additional agent skills it installs or updates. Map queries send their location inputs through OOMOL to Baidu Maps, so submit only information you intend to share. The bundled instructions were fully inspected; remote installer contents and hosted-service behavior remain outside that inspection.
The supplied chunk performs remote script execution and contains no Baidu Maps search or data-reading behavior. Dependency installation could be a supporting implementation detail, but the supplied content establishes no such relationship. The downloaded script's contents and subsequent effects are not available for assessment.
The supplied code performs a login operation rather than searching or reading Baidu Maps data. Authentication can be a supporting implementation detail, but this chunk provides no evidence that the oo login supports Baidu Maps or accesses its services.
The command immediately executes whatever script the installation endpoint returns, without pinning or verifying its contents. HTTPS protects transport but does not protect against a compromised publisher or distribution infrastructure; this is the same underlying installation vulnerability identified in the setup-workflow finding, not an additional independent exploit.
oo: command not found — install the oo CLI (other platforms: https://cli.oomol.com/install-guide.md):
curl -fsSL https://cli.oomol.com/install.sh | bash # macOS / Linux
The workflow instructs the agent to send action payloads through OOMOL to Baidu Maps; these payloads can contain addresses, coordinates, IP addresses, or route endpoints. Although the providers are identified, the skill does not warn about disclosing sensitive location information and instead labels all read actions safe to run directly.
The setup instructions pipe remotely retrieved content directly into Bash or PowerShell without an integrity check, review step, or explicit approval for executing installation code. A compromised distribution endpoint or modified installer could execute arbitrary commands with the invoking user's permissions; the missing-CLI condition limits exposure but does not make the downloaded code trustworthy.
Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.
- **`OOMOL_INSUFFICIENT_CREDIT`** — OOMOL billing stop. Recharge at `https://console.oomol.com/billing/token-recharge` before retrying.
- **HTTP 402 without `OOMOL_INSUFFICIENT_CREDIT`** — the third-party account itself has no active plan or credit. Report the provider error message as is; do not ask the user to recharge OOMOL.
## Resources