Security audit

Better Proposals

Security checks for vulnerabilities and agentic risk

Overview

The skill is mostly coherent for Better Proposals read access, but its first-time setup tells an agent to run remote installer scripts directly, which deserves user review before installation.

Review the oo CLI installation path before installing. Prefer installing the CLI manually from a verified OOMOL source, and only connect a Better Proposals account whose proposal, company, quote, template, settings, and billing-related data you are comfortable exposing through this connector.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration

Findings (3)

External Script Fetching

High

Category: Supply Chain
Confidence: 98% confidence
Finding: The skill instructs the agent to install software by piping a remote script directly into a shell (curl ... | bash). This executes unverified code from the network, creating a supply-chain and remote code execution risk if the server, transport, or script contents are compromised.
Content: Scanner excerpt · SKILL.md (reported line 74)May include surrounding context.

oo: command not found — install the oo CLI (other platforms: https://cli.oomol.com/install-guide.md):

bash
curl -fsSL https://cli.oomol.com/install.sh | bash # macOS / Linux

powershell

Description-Behavior Mismatch

Medium

Category: Not specified by scanner
Confidence: 97% confidence
Finding: The manifest and top-level description frame the skill as being for 'searching and reading data', but the body explicitly supports state-changing actions and provides operational guidance for executing them. This mismatch can cause an agent or user to invoke the skill under a lower-risk assumption and then perform unintended modifications if write-capable actions are later added or exposed.
Content: No source excerpt is available for this finding.

Vague Triggers

Medium

Category: Not specified by scanner
Confidence: 95% confidence
Finding: The instruction to use this skill for 'ANY Better Proposals request' is overly broad and can cause aggressive auto-selection whenever Better Proposals is merely mentioned. Over-broad routing increases the chance of unnecessary tool execution, data exposure, or bypassing more precise task scoping.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.