Security audit
Security checks for vulnerabilities and agentic risk
The Crunchbase workflow fits its purpose, but setup can execute unverified remote code and introduce broader agent changes without clearly scoped approval.
Review and approve CLI installation separately before allowing the agent to use this skill. Verify the installer and release, check automatic agent-skill synchronization, and connect only the intended Crunchbase account. Installer contents and delivered runtime behavior were not verified; no credential theft or malicious intent was established.
The supplied chunk performs remote software installation rather than Crunchbase data retrieval. Although installation can be a supporting implementation detail, this chunk provides no evidence connecting the Oomol installer to the declared Crunchbase functionality. The downloaded script's contents and further effects are not available for assessment.
The supplied chunk performs only authentication; it contains no Crunchbase search or read operation and establishes no relationship between oo and Crunchbase. Authentication could be a supporting implementation detail, but that connection is not demonstrated here. The command alone does not establish credential theft or other malicious behavior.
The command pipes a mutable remote script directly into Bash without version pinning or independent integrity verification; the PowerShell alternative has the same weakness. If the installer source or delivery infrastructure is compromised, executing it could run attacker-controlled code with the agent process's permissions, exposing local files and credentials.
oo: command not found — install the oo CLI (other platforms: https://cli.oomol.com/install-guide.md):
curl -fsSL https://cli.oomol.com/install.sh | bash # macOS / Linux
The fallback directs installation of executable software without first explaining the system changes or obtaining explicit installation approval. A missing prerequisite for a read-only data request should not implicitly authorize host modification; the failure-only condition limits exposure but does not establish user consent.
Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.
- **`OOMOL_INSUFFICIENT_CREDIT`** — OOMOL billing stop. Recharge at `https://console.oomol.com/billing/token-recharge` before retrying.
- **HTTP 402 without `OOMOL_INSUFFICIENT_CREDIT`** — the third-party account itself has no active plan or credit. Report the provider error message as is; do not ask the user to recharge OOMOL.
## Resources
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
## Resources
- Crunchbase homepage: https://www.crunchbase.com
- API documentation: https://data.crunchbase.com/docs/using-the-api