Security audit
Security checks for vulnerabilities and agentic risk
The Discord controls are clearly scoped, but setup directs the agent to execute remote installation code without separate approval or integrity verification.
Review the installation step before enabling this skill. Prefer a separately approved, pinned and verified CLI installation, and review its automatic agent-skill synchronization. Give the Discord bot only needed permissions and retain confirmations for posts, moderation, and deletions. The bundled instructions were fully inspected; the downloaded installer and hosted connector were not verified.
The visible behavior is remote installer execution rather than Discord Bot data management. Dependency installation can be a supporting implementation detail, but this chunk provides no evidence that the Oomol installer supports the declared Discord functionality. The downloaded script's contents and any subsequent behavior are not available for assessment.
Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.
## Available actions
- `add_group_dm_user` — Add a recipient to a group DM channel. [write]
- `add_guild_member` — Add a user to a guild with a user access token. [write]
- `add_guild_member_role` — Add a role to a guild member. [write]
- `add_my_message_reaction` — Add a reaction as the current bot user. [write]
- `add_thread_member` — Add a member to a thread. [write]
Piping an HTTPS response directly into Bash executes mutable remote code without a pinned version or independent integrity verification; the PowerShell alternative has the same weakness. Compromise of the installer distribution path could execute attacker-controlled code with the agent process's privileges, exposing local data and credentials, although the legitimate dependency context and conditional fallback reduce exposure.
oo: command not found — install the oo CLI (other platforms: https://cli.oomol.com/install-guide.md):
curl -fsSL https://cli.oomol.com/install.sh | bash # macOS / Linux
The missing-CLI fallback directs the agent to execute a downloaded installer without explicitly explaining its local execution privileges or obtaining approval for system changes. The confirmation requirements cover Discord actions, not local installation, leaving a separate authorization gap even though setup is conditional.
Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.
- **`OOMOL_INSUFFICIENT_CREDIT`** — OOMOL billing stop. Recharge at `https://console.oomol.com/billing/token-recharge` before retrying.
- **HTTP 402 without `OOMOL_INSUFFICIENT_CREDIT`** — the third-party account itself has no active plan or credit. Report the provider error message as is; do not ask the user to recharge OOMOL.
## Resources