Security audit
Owl Protocol
Security checks across malware telemetry and agentic risk
Overview
This skill is a disclosed Owl Protocol connector helper with scoped `oo` CLI access and clear confirmation guidance for writes.
Install only if you intend to let the agent use your OOMOL-connected Owl Protocol account. Review payloads carefully before approving `patch_project_token`, because it changes token metadata; avoid running the optional CLI install step unless you trust the OOMOL CLI installer and need the tool installed.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
64/64 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.