Security audit
Security checks for vulnerabilities and agentic risk
The Booqable reads fit the stated purpose, but setup can execute downloaded code without a separate approval or integrity check.
Review and approve CLI setup separately before allowing Booqable requests. Prefer a pinned, independently verified installation and check which agent skills it installs or updates. Connect only the account and permissions needed, and understand that OOMOL mediates access to business data. The full bundled artifact was inspected, but the remote installers and hosted service implementation remain unverified; no malicious behavior was established.
The supplied command performs remote-script execution, not the declared Booqable data access. Although installing a CLI could be a supporting implementation detail, the supplied chunk establishes no relationship between this installer and Booqable. The downloaded script is not provided, so its further effects cannot be determined.
Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.
## Available actions
- `get_current_company` — Fetch the current Booqable company connected to the access token.
- `get_customer` — Fetch one Booqable customer by id.
- `get_order` — Fetch one Booqable order by id.
- `get_product_group` — Fetch one Booqable product group by id.
The command pipes a mutable network response directly into Bash without a pinned version or independent integrity verification; the PowerShell alternative uses the same download-and-execute pattern. Compromise of the installer distribution path could execute arbitrary code with the agent process's privileges, although the missing-CLI condition limits when this exposure occurs and no malicious installer content is shown.
oo: command not found — install the oo CLI (other platforms: https://cli.oomol.com/install-guide.md):
curl -fsSL https://cli.oomol.com/install.sh | bash # macOS / Linux
The fallback instructs the agent to install software after a missing-command error without requiring informed approval for executing remote code or changing the local environment. Although conditional and relevant to setup, this expands a read-only Booqable request into a materially different operation that the user may not have authorized.
Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.
- **`OOMOL_INSUFFICIENT_CREDIT`** — OOMOL billing stop. Recharge at `https://console.oomol.com/billing/token-recharge` before retrying.
- **HTTP 402 without `OOMOL_INSUFFICIENT_CREDIT`** — the third-party account itself has no active plan or credit. Report the provider error message as is; do not ask the user to recharge OOMOL.
## Resources