T03 · Remote Payload Retrieval and Execution
Error
- Location
- SKILL.md:55
- Finding
- Unverified Remote Installer Downloaded and Executed Directly## Vulnerability Details **File Location**: `SKILL.md`, lines 55–65 **Vulnerability Type**: Remote payload retrieval and execution **Risk Level**: Critical The first-time setup instructions provide remote-to-shell installation commands for both macOS/Linux and Windows: ```bash curl -fsSL https://cli.oomol.com/install.sh | bash # macOS / Linux ``` ```powershell irm https://cli.oomol.com/install.ps1 | iex # Windows PowerShell ``` ### Technical Analysis These commands retrieve mutable scripts from `cli.oomol.com` and execute them immediately using Bash or PowerShell. The instructions do not pin a release, verify a cryptographic checksum or publisher signature, or provide an opportunity to inspect the downloaded content before execution. Because the installer is not included in the audited project, its effective behavior cannot be determined by reviewing this Skill and can change after the Skill has been approved. Compromise of the hosting infrastructure, publishing process, or trusted remote content could therefore convert the documented setup path into arbitrary code execution. Installation is conditional on the `oo` command being unavailable, which reduces invocation frequency but does not eliminate the exposure. Executing a remote installer also exceeds the minimum privileges needed for the Skill's declared read-only ChartMogul operations. The connector itself only requires an already-installed CLI, authentication, and a configured connection. ### Attack Path 1. The user invokes the Skill on a system where the `oo` CLI is unavailable. 2. A command fails with `oo: command not found`. 3. The agent or user follows the first-time setup instructions. 4. `curl` or `irm` retrieves the current installer from the external OOMOL host. 5. The pipe passes the response directly to Bash or `iex`, without verification or review. 6. If the remote installer or its distribution infrastructure has been compromised, at ...[truncated 657 chars]
- Remediation
- ## Remediation Suggestions 1. Remove all `curl | bash` and `irm | iex` installation instructions. 2. Direct users to a version-pinned release distributed through a trusted package manager or verified publisher. 3. If manual installation is necessary, download the installer to a local file without executing it automatically. 4. Publish expected SHA-256 checksums and, preferably, cryptographic signatures through an independently authenticated channel. 5. Verify the checksum and publisher signature before execution, and fail closed on any mismatch. 6. Allow the user to inspect the downloaded installer and require explicit approval before running it. 7. Run installation with ordinary user privileges wherever possible; do not request administrator or root privileges unless a documented component strictly requires them. 8. Keep installation outside normal Skill execution. The Skill should report the missing prerequisite and provide safe, user-driven setup documentation rather than executing an installer itself.