Security audit
IPGeolocation.io
Security checks across malware telemetry and agentic risk
Overview
This skill is a narrow IPGeolocation.io connector wrapper with disclosed OOMOL credential use and no artifact-backed malicious behavior.
Install only if you intend to use OOMOL's oo CLI with an IPGeolocation.io connection. Expect it to use your connected API key through OOMOL for lookup requests, and only run the one-time installer or login steps when you trust the OOMOL CLI source and a command actually fails for setup reasons.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
64/64 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.