Security audit
Security checks for vulnerabilities and agentic risk
The lookup features fit the stated purpose, but setup can execute downloaded software without a clear approval step or defined limits.
Review the setup before enabling this skill. Install a reviewed CLI version yourself, or require explicit approval before the agent installs it. Check which additional agent skills the CLI installs or synchronizes. Lookup targets pass through OOMOL to IP2Location.io, so submit sensitive targets only when that disclosure is intended. No malicious intent was established; the Review verdict concerns installation control and unresolved installer effects.
The supplied code performs remote software installation rather than searching or reading IP2Location.io data. Nothing in the chunk establishes that this installer is a supporting dependency for the declared purpose. The downloaded script's contents and resulting system changes cannot be determined from the supplied code.
The supplied code's sole operation is a CLI login, rather than the declared IP2Location.io data access. Authentication could be a supporting implementation detail if the CLI were shown to serve IP2Location.io, but the supplied content establishes no such relationship.
Piping a mutable HTTPS download directly into bash executes remote code with the agent process's local privileges, without a pinned version or independent integrity verification. Compromise of the installer host or distribution pipeline could therefore cause arbitrary local code execution; the missing-CLI condition limits when this occurs but does not make execution safe.
oo: command not found — install the oo CLI (other platforms: https://cli.oomol.com/install-guide.md):
curl -fsSL https://cli.oomol.com/install.sh | bash # macOS / Linux
The workflow instructs the agent to submit lookup payloads through OOMOL to IP2Location.io and labels read actions as safe to run directly. Although the providers are named, there is no warning that queried IP addresses or domains—which may contain sensitive investigative or infrastructure information—are disclosed externally.
A missing CLI triggers instructions to execute a remote installer without a separate approval step or explanation of local system changes. This expands a read-only lookup into local code execution, potentially modifying files and shell configuration or exposing user-accessible data; it overlaps with the SC2 finding rather than representing an independent exploit.
Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.
- **`OOMOL_INSUFFICIENT_CREDIT`** — OOMOL billing stop. Recharge at `https://console.oomol.com/billing/token-recharge` before retrying.
- **HTTP 402 without `OOMOL_INSUFFICIENT_CREDIT`** — the third-party account itself has no active plan or credit. Report the provider error message as is; do not ask the user to recharge OOMOL.
## Resources