Security audit
Security checks for vulnerabilities and agentic risk
The JSONBin workflow has clear safeguards, but its setup instructions can trigger unverified remote code execution without separate user approval.
Review setup before installing. Install a verified CLI version yourself and check its automatic skill synchronization before allowing agent use. OOMOL mediates JSONBin requests and holds the connected API key, so consider whether you trust it with that access. Keep the skill's explicit approvals for writes and deletions. The entire bundled artifact was reviewed, but external installer code and hosted connector behavior remain outside that inspection.
The supplied command does not perform any JSONBin.io operation. It executes a remote installer from cli.oomol.com, with no demonstrated connection to the declared JSONBin.io functionality. This is an undeclared capability and accesses an inconsistent resource. The contents and further effects of the downloaded script cannot be determined from the supplied chunk.
The supplied code only invokes a login command; it contains no JSONBin.io operations or evidence linking this authentication step to JSONBin.io. Authentication could be a supporting implementation detail if that connection were established, but the supplied chunk does not establish it.
Piping the HTTPS response directly into bash executes a mutable remote script without prior inspection or verification of a specific artifact. Compromise of the installer hosting or release pipeline could enable file modification, credential theft, or other actions available to the executing account; HTTPS alone does not protect against those compromises.
oo: command not found — install the oo CLI (other platforms: https://cli.oomol.com/install-guide.md):
curl -fsSL https://cli.oomol.com/install.sh | bash # macOS / Linux
The fallback setup instructs immediate execution of downloaded shell or PowerShell code without an integrity check or explicit approval for the installation's local effects. Although conditional on a missing CLI and relevant to the task, this can turn dependency setup into arbitrary code execution with the agent's privileges if the installer distribution is compromised.
Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.
- **`OOMOL_INSUFFICIENT_CREDIT`** — OOMOL billing stop. Recharge at `https://console.oomol.com/billing/token-recharge` before retrying.
- **HTTP 402 without `OOMOL_INSUFFICIENT_CREDIT`** — the third-party account itself has no active plan or credit. Report the provider error message as is; do not ask the user to recharge OOMOL.
## Resources