Security audit
Security checks for vulnerabilities and agentic risk
The lookup functions fit the stated purpose, but setup can execute an unverified installer without clear user approval.
Review setup before enabling automatic use. Install a verified CLI release yourself and require approval for installer execution. Review its managed-skill synchronization; publisher documentation provides OO_SKILLS_SYNC_DISABLED=1 to disable it. OOMOL mediates queries and connected-account access. The full bundled artifact was inspected, but external installer and binary behavior remain unverified.
The supplied command does not access open.mcd.cn or perform any McDonald's China data operations. It executes an external installation script, with no demonstrated connection to the declared functionality. The downloaded script's contents are not supplied, so its further behavior cannot be determined.
The command pipes a mutable remote script directly into Bash, granting the downloaded content execution privileges without prior verification. HTTPS protects transport but does not protect against a compromised publisher or hosting infrastructure; this is the concrete execution mechanism underlying the SQP-2 finding, not a separate exploit chain.
oo: command not found — install the oo CLI (other platforms: https://cli.oomol.com/install-guide.md):
curl -fsSL https://cli.oomol.com/install.sh | bash # macOS / Linux
The fallback directs installation by immediately executing downloaded shell or PowerShell code without an integrity check or explicit approval for changing the host. A compromised installer source could execute arbitrary code with the invoking user's privileges; restricting this fallback to a missing CLI reduces exposure but does not eliminate the risk.
Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.
- **`OOMOL_INSUFFICIENT_CREDIT`** — OOMOL billing stop. Recharge at `https://console.oomol.com/billing/token-recharge` before retrying.
- **HTTP 402 without `OOMOL_INSUFFICIENT_CREDIT`** — the third-party account itself has no active plan or credit. Report the provider error message as is; do not ask the user to recharge OOMOL.
## Resources