Security audit
Security checks for vulnerabilities and agentic risk
The BoxHero features match the description, but setup can execute unchecked software without clear user approval.
Review the setup before installing. Have the CLI installed through a separately reviewed process, require approval before running downloaded installers, and review or disable automatic installation of additional agent skills using the [upstream controls](https://github.com/oomol-lab/oo-cli/blob/main/docs/commands.md). BoxHero access through OOMOL is disclosed, but the remote installer contents and exact local changes remain unverified.
The supplied chunk performs remote installer execution rather than searching or reading BoxHero data. No shown code establishes that this installation is a supporting dependency for the declared functionality. The downloaded script's contents are unavailable, so its downstream behavior cannot be determined.
Piping a remotely fetched script directly into Bash executes its contents with the agent process's local permissions, without inspection or independent integrity verification. If the distribution endpoint or delivery infrastructure is compromised, the script could access local secrets or modify files; the analogous PowerShell command has the same risk.
oo: command not found — install the oo CLI (other platforms: https://cli.oomol.com/install-guide.md):
curl -fsSL https://cli.oomol.com/install.sh | bash # macOS / Linux
The fallback directs the agent to install software by executing remote scripts without explaining local-system changes or requiring explicit approval. Although limited to a missing-CLI error, this can unexpectedly expand a read-only BoxHero request into local code execution and installation.
Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.
- **`OOMOL_INSUFFICIENT_CREDIT`** — OOMOL billing stop. Recharge at `https://console.oomol.com/billing/token-recharge` before retrying.
- **HTTP 402 without `OOMOL_INSUFFICIENT_CREDIT`** — the third-party account itself has no active plan or credit. Report the provider error message as is; do not ask the user to recharge OOMOL.
## Resources