Security audit
Security checks for vulnerabilities and agentic risk
The DynaPictures workflow is coherent, but its automatic setup can execute changing remote code and introduce broader agent changes without clear approval.
Review and approve CLI installation separately, including any bundled skills it adds or synchronizes. Prefer a verified, version-pinned installation and prevent automatic setup until reviewed. Confirm that OOMOL's account access and handling of template/image data suit your needs. The artifact requires approval before image generation, but the external installer and connector implementation were not verified.
The supplied command executes an installer from Oomol, not a DynaPictures endpoint. No DynaPictures integration or dependency relationship is shown, so this is an undeclared installation capability rather than an established supporting implementation detail. The remote script's further effects cannot be determined from the supplied chunk.
The supplied chunk only performs CLI login and shows no DynaPictures interaction or connection between oo and DynaPictures. Authentication could be a supporting implementation detail if that connection were established, but the provided content does not establish it.
Piping a remotely fetched script directly into Bash executes its current contents with the invoking user's permissions, without a pinned version or independent integrity verification; the PowerShell alternative has the same issue. Compromise of the installer distribution path could therefore lead to arbitrary code execution and access to local secrets, although setup is conditional and there is no evidence that the current endpoint is malicious.
oo: command not found — install the oo CLI (other platforms: https://cli.oomol.com/install-guide.md):
curl -fsSL https://cli.oomol.com/install.sh | bash # macOS / Linux
On a missing-CLI error, the skill instructs installation without first disclosing local changes or obtaining approval; its confirmation rules cover DynaPictures actions, not software installation. If followed in an execution environment that permits these commands, this can modify the user's system beyond the requested DynaPictures operation, although the declared oo-only tool restriction may prevent execution in strictly enforced environments.
Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.
- **`OOMOL_INSUFFICIENT_CREDIT`** — OOMOL billing stop. Recharge at `https://console.oomol.com/billing/token-recharge` before retrying.
- **HTTP 402 without `OOMOL_INSUFFICIENT_CREDIT`** — the third-party account itself has no active plan or credit. Report the provider error message as is; do not ask the user to recharge OOMOL.
## Resources