Security audit
Security checks for vulnerabilities and agentic risk
The paper lookup functions fit the stated purpose, but setup can execute unpinned remote code and introduce persistent agent changes without clear user control.
Review the setup before installing. Prefer a reviewed, version-pinned CLI installation and inspect its automatic skill synchronization controls. Expect research requests to pass through OOMOL and potentially consume credits. The exact remote installer remains unverified; the inspected artifact does not establish intentional deception, destructive behavior, or data theft.
The supplied chunk performs installation rather than searching or reading preprint data. Although installing a dependency can be a supporting implementation detail, this chunk establishes no connection between the remote installer and the declared functionality. The downloaded script's further behavior is not visible and cannot be assessed.
The supplied code performs a login operation rather than searching or reading preprint data. Nothing in the chunk connects this authentication step to bioRxiv or medRxiv, so it cannot be established as a supporting implementation detail of the declared purpose.
Piping an HTTPS download directly into bash executes mutable remote content without inspecting it or verifying a pinned version, hash, or signature. A compromised distribution endpoint could therefore execute arbitrary code with the agent process's privileges; HTTPS and the legitimate setup purpose do not eliminate this supply-chain risk.
oo: command not found — install the oo CLI (other platforms: https://cli.oomol.com/install-guide.md):
curl -fsSL https://cli.oomol.com/install.sh | bash # macOS / Linux
A missing dependency triggers instructions to execute downloaded shell or PowerShell code without an explicit user-approval checkpoint or explanation of local system changes. Although conditional and related to setup, this expands a read-only research task into software installation and exposes the agent's local execution privileges.
Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.
- **`OOMOL_INSUFFICIENT_CREDIT`** — OOMOL billing stop. Recharge at `https://console.oomol.com/billing/token-recharge` before retrying.
- **HTTP 402 without `OOMOL_INSUFFICIENT_CREDIT`** — the third-party account itself has no active plan or credit. Report the provider error message as is; do not ask the user to recharge OOMOL.
## Resources
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
## Resources
- bioRxiv and medRxiv homepage: https://www.biorxiv.org/
- API documentation: https://api.biorxiv.org/