Security audit
Security checks for vulnerabilities and agentic risk
The ClassMarker functions fit the stated purpose, but setup directs the agent to run downloaded installation code without a clear approval step.
Review the setup before enabling it. Install a reviewed CLI version yourself, approve any changes to other installed agent skills, and use a ClassMarker key limited to the data needed. OOMOL is the disclosed intermediary for credentials and requests. The downloaded installer and hosted connector implementation were not verified; no malicious behavior was established in the bundled skill.
The supplied code performs remote installer execution rather than searching or reading ClassMarker data. Although installation can be a supporting implementation detail, the supplied content establishes no relationship between this installer and the declared ClassMarker functionality. The downloaded script's further behavior is not visible.
The supplied code performs only a login operation, rather than the declared ClassMarker search and reading functions. Authentication could be a supporting implementation detail, but the chunk provides no evidence that this login supports ClassMarker access.
The curl-to-bash command executes the installer endpoint's current response with the agent's local user privileges, without a pinned version or independently verified integrity. Compromise of the distribution endpoint could therefore lead to arbitrary code execution and access to local files or credentials; HTTPS does not protect against a compromised publisher, and the PowerShell alternative has the same underlying risk.
oo: command not found — install the oo CLI (other platforms: https://cli.oomol.com/install-guide.md):
curl -fsSL https://cli.oomol.com/install.sh | bash # macOS / Linux
A missing CLI triggers instructions to install software by immediately executing downloaded scripts, without requiring informed user approval for local code execution and system changes. Although setup is conditional and relevant to the connector, a read-oriented ClassMarker request does not itself authorize installing software on the user's machine.
Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.
- **`OOMOL_INSUFFICIENT_CREDIT`** — OOMOL billing stop. Recharge at `https://console.oomol.com/billing/token-recharge` before retrying.
- **HTTP 402 without `OOMOL_INSUFFICIENT_CREDIT`** — the third-party account itself has no active plan or credit. Report the provider error message as is; do not ask the user to recharge OOMOL.
## Resources