Security audit
Security checks for vulnerabilities and agentic risk
The news features fit their purpose, but setup directs the agent to execute unverified downloaded code without a clear approval step.
Review setup before installing. Prefer a verified, pinned CLI installation and require approval before downloaded installers run. Review its bundled-skill changes; the publisher documents OO_SKILLS_SYNC_DISABLED=1 to disable startup synchronization in its [command reference](https://github.com/oomol-lab/oo-cli/blob/main/docs/commands.md). NewsCatcher access is routed through your OOMOL-connected account and may consume credits. No bundled malicious payload was found, but the external installer and runtime were not verified.
The supplied command executes an external installation script and contains no NewsCatcher search or data-reading operation. Nothing provided establishes this installer as a supporting dependency for NewsCatcher, so its execution is an undeclared capability involving an inconsistent resource. The downloaded script's further behavior cannot be determined from this chunk.
Authentication can be a supporting implementation detail, but the supplied chunk contains only a login command and provides no connection to NewsCatcher. Its observable purpose therefore differs materially from the declared NewsCatcher functionality. The command alone does not establish which service is authenticated or whether credentials are stored.
The command pipes a mutable remote script directly into bash without a pinned version or independent integrity verification; the PowerShell alternative has the same trust problem. Compromise of the installer endpoint or its distribution infrastructure could execute attacker-controlled code with the invoking user's permissions, although exposure is limited to the missing-CLI setup path.
oo: command not found — install the oo CLI (other platforms: https://cli.oomol.com/install-guide.md):
curl -fsSL https://cli.oomol.com/install.sh | bash # macOS / Linux
A missing CLI triggers instructions to execute downloaded installation code without first explaining the local changes or obtaining explicit installation approval. Although conditional setup reduces exposure, a news-reading request does not itself authorize arbitrary local code execution, which can modify files and access data with the invoking user's permissions.
Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.
- **`OOMOL_INSUFFICIENT_CREDIT`** — OOMOL billing stop. Recharge at `https://console.oomol.com/billing/token-recharge` before retrying.
- **HTTP 402 without `OOMOL_INSUFFICIENT_CREDIT`** — the third-party account itself has no active plan or credit. Report the provider error message as is; do not ask the user to recharge OOMOL.
## Resources