Back to skill

Security audit

JumpCloud

Security checks for vulnerabilities and agentic risk

Overview

This skill is a coherent read-only JumpCloud integration that uses the OOMOL CLI and does not show hidden or destructive behavior.

Install only if you intend to let Codex read JumpCloud systems and system users through your OOMOL-connected account. Review the OOMOL connection scopes and be cautious before approving any future version that adds write or destructive JumpCloud actions.

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Static analysis

No suspicious patterns detected.