Security audit

IQAir AirVisual

Security checks for vulnerabilities and agentic risk

Overview

The skill is mostly a coherent IQAir AirVisual connector helper, but it asks for broad OOMOL CLI authority and includes unverified pipe-to-shell installation commands.

Review this skill before installing. It appears intended for read-only IQAir AirVisual lookups through OOMOL, but you should avoid running the installer pipe commands unless you independently trust and verify the OOMOL CLI installer, and you should be aware that the skill grants broad `oo` CLI execution rather than a narrow allowlist for only IQAir AirVisual actions.

A.I.G

Vulnerability Patterns

Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally

Findings (2)

T03 · Remote Payload Retrieval and Execution

Error

Location: SKILL.md:59
Finding: Unverified Remote Installation Scripts Executed Directly by Shells
Content: View full analysis
Remediation: View remediation
/install.sh" # Verify a publisher signature or independently obtained SHA-256 digest here. less oo-install.sh bash oo-install.sh ``` The checksum or signature must not be fetched solely from the same mutable location as the installer. ]]>

T05 · Unauthorized Access and Privilege Escalation

Warning

Location: SKILL.md:4
Finding: Overly Broad Wildcard Permission for the OOMOL CLI
Content: View full analysis
Remediation: View remediation

SkillSpector

Vulnerability Patterns

Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access

Findings (2)

External Script Fetching

High

Category: Supply Chain
Confidence: 97% confidence
Finding: The skill instructs users to install software by piping a remotely fetched script directly into a shell, which bypasses integrity verification and executes whatever the remote server returns at that moment. If the install endpoint, CDN, DNS, TLS trust chain, or upstream distribution path is compromised, this becomes immediate arbitrary code execution on the user's machine.
Content: Scanner excerpt · SKILL.md (reported line 59)May include surrounding context.

oo: command not found — install the oo CLI (other platforms: https://cli.oomol.com/install-guide.md):

bash
curl -fsSL https://cli.oomol.com/install.sh | bash # macOS / Linux

powershell

Vague Triggers

Medium

Category: Not specified by scanner
Confidence: 93% confidence
Finding: The description says to use this skill for "ANY IQAir AirVisual request" and "Whenever a task involves IQAir AirVisual," which is an expansive trigger without negative examples or boundary conditions. In a markdown skill description, this can cause unintended invocation for casual mentions or tangential references rather than clearly scoped operational requests.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.