Security audit
Security checks for vulnerabilities and agentic risk
The Crisp actions have clear approval controls, but the required CLI can also install persistent agent skills without this skill explaining that effect.
Review CLI installation separately and use only the Crisp permissions you need. The publisher documents OO_SKILLS_SYNC_DISABLED=1 to prevent startup skill writes; configure it before invoking the CLI if you want to avoid those changes. Keep confirmation enabled for outgoing messages. The remote installers remain unverified, so this review cannot establish their exact installation effects.
The supplied chunk performs remote installer execution rather than reading, creating, or updating Crisp data. Although dependency installation can be a supporting implementation detail, this chunk establishes no connection between the Oomol installer and the declared Crisp functionality. The downloaded script's contents and any further actions are not available for assessment.
The setup command pipes a remotely fetched, mutable script directly into Bash without verifying its integrity or reviewing it; the PowerShell alternative uses the same execution pattern. A compromised installer endpoint or distribution pipeline could execute arbitrary code with the agent's local privileges and access local credentials or files, although the command-not-found prerequisite limits exposure.
oo: command not found — install the oo CLI (other platforms: https://cli.oomol.com/install-guide.md):
curl -fsSL https://cli.oomol.com/install.sh | bash # macOS / Linux
Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.
- **`OOMOL_INSUFFICIENT_CREDIT`** — OOMOL billing stop. Recharge at `https://console.oomol.com/billing/token-recharge` before retrying.
- **HTTP 402 without `OOMOL_INSUFFICIENT_CREDIT`** — the third-party account itself has no active plan or credit. Report the provider error message as is; do not ask the user to recharge OOMOL.
## Resources