Security audit
Security checks for vulnerabilities and agentic risk
The skill is mostly a disclosed Notion read/search connector, but its fallback setup tells the agent to run an unverified remote installer script, which is too powerful for this purpose.
Install only if you are comfortable with OOMOL mediating access to your Notion data and with the oo CLI setup. Prefer installing the CLI manually from a trusted source and verifying it yourself before using the skill; do not let an agent run the remote installer automatically.
The skill includes capability to install software by executing remote bootstrap commands, which is significantly more powerful than its stated purpose of reading/searching Notion data. This creates a path from a benign data-access task to arbitrary code execution on the host, especially dangerous in an agent context where users may not realize installation side effects are in scope.
curl ... | bash executes code fetched live from a remote server without verification, review, or integrity pinning. In an agent workflow this is especially risky because compromise of the distribution endpoint, network path, or installer content could lead to full host compromise under the agent's execution privileges.
oo: command not found — install the oo CLI (other platforms: https://cli.oomol.com/install-guide.md):
curl -fsSL https://cli.oomol.com/install.sh | bash # macOS / Linux
The skill is presented as a read/search interface for Notion, but it also instructs the agent to perform authentication and connection bootstrap steps. Expanding operational scope beyond the declared purpose can cause agents to take account-affecting actions the user did not explicitly request, increasing the risk of unsafe delegation and unexpected credential or environment changes.
No suspicious patterns detected.