Security audit
OKSign
Security checks across malware telemetry and agentic risk
Overview
This skill is a disclosed OKSign connector helper that reads account and document information through OOMOL's CLI, with no evidence of hidden or destructive behavior.
Install this only if you trust OOMOL and are comfortable connecting your OKSign account through OOMOL. The main practical risk is that the agent can read OKSign account, user, and document metadata visible to the connected account; review requested actions before allowing anything that could change or remove data.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
64/64 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.