Security audit
News API
Security checks across malware telemetry and agentic risk
Overview
This skill is a disclosed News API connector that uses the OOMOL CLI, with normal setup risk from an optional remote installer command.
Install this only if you are comfortable using OOMOL as the connector for News API and trust the oo CLI installation source. On sensitive machines, prefer official manual installation or checksum/signature-verified packages instead of piping a remote installer directly into a shell.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
60/60 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.