Security audit
Security checks for vulnerabilities and agentic risk
The ChartMogul reads fit the stated purpose, but automatic setup executes unverified remote code and may make broader changes to agent skills.
Review and install a verified CLI release separately before using this skill. Consider disabling automatic skill synchronization with OO_SKILLS_SYNC_DISABLED=1, and confirm the connected account's access. The bundled instructions were fully inspected; remote installers and hosted connector implementation remain unverified.
The skill's read-oriented purpose expands into local software installation when the CLI is missing, using remotely supplied code without integrity verification or explicit user approval. Dependency setup is relevant to the skill and is conditional, which reduces suspicion of malicious intent, but a compromised installer could execute arbitrary commands with the invoking user's privileges.
Authentication could support a ChartMogul integration, but the supplied chunk contains only a login command, with no ChartMogul targeting or data-access behavior. Its observable purpose therefore differs materially from the declared purpose.
The command pipes a live HTTPS response directly into Bash, giving the installer arbitrary execution privileges under the current user without checking a pinned version, signature, or trusted checksum. HTTPS protects transport but does not protect against compromise of the distribution endpoint; the conditional setup context reduces exposure but does not eliminate this supply-chain risk.
oo: command not found — install the oo CLI (other platforms: https://cli.oomol.com/install-guide.md):
curl -fsSL https://cli.oomol.com/install.sh | bash # macOS / Linux
The setup instructions authorize shell and PowerShell installers without explaining that they execute third-party code and may modify the local environment. Although installation is conditional on a missing prerequisite, it crosses from reading ChartMogul data into local code execution without a separate consent step.
Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.
- **`OOMOL_INSUFFICIENT_CREDIT`** — OOMOL billing stop. Recharge at `https://console.oomol.com/billing/token-recharge` before retrying.
- **HTTP 402 without `OOMOL_INSUFFICIENT_CREDIT`** — the third-party account itself has no active plan or credit. Report the provider error message as is; do not ask the user to recharge OOMOL.
## Resources