Security audit
Security checks for vulnerabilities and agentic risk
The certificate searches fit the stated purpose, but automatic setup executes unverified downloaded code without a clear approval step.
Review setup before installing. Prefer an independently verified, version-pinned CLI installation and explicitly approve its system changes. Expect certificate requests to pass through OOMOL. The publisher's [command reference](https://raw.githubusercontent.com/oomol-lab/oo-cli/main/docs/commands.md) documents OO_SKILLS_SYNC_DISABLED to prevent automatic agent-skill synchronization. The remote installer contents and exact installed-release behavior remain unverified.
The supplied command does not access the declared Energy Performance Certificate service or perform any certificate-data operation. It instead executes an installer from an unrelated service, with no demonstrated connection to the declared purpose. The remote script's contents are not supplied, so its further behavior cannot be assessed.
The only supplied command initiates login and contains no EPC query, retrieval operation, or reference to the declared service. Authentication could support a larger implementation, but the supplied chunk provides no evidence connecting this login to EPC access.
The command pipes a mutable remote script directly into Bash without verifying its contents, integrity, or release version; the PowerShell alternative has the same problem. Compromise of the installer distribution path could yield arbitrary code execution with the agent's privileges. HTTPS and the domain's relevance to the documented CLI reduce some concerns but do not protect against a compromised publisher or distribution service.
oo: command not found — install the oo CLI (other platforms: https://cli.oomol.com/install-guide.md):
curl -fsSL https://cli.oomol.com/install.sh | bash # macOS / Linux
A missing CLI triggers instructions to execute an installer without first obtaining approval for software installation or explaining its system changes. A request to read certificate data does not itself authorize arbitrary installer execution, which can modify files and configuration with the agent's privileges. The conditional fallback reduces exposure but does not establish user consent.
Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.
- **`OOMOL_INSUFFICIENT_CREDIT`** — OOMOL billing stop. Recharge at `https://console.oomol.com/billing/token-recharge` before retrying.
- **HTTP 402 without `OOMOL_INSUFFICIENT_CREDIT`** — the third-party account itself has no active plan or credit. Report the provider error message as is; do not ask the user to recharge OOMOL.
## Resources