Security audit
Security checks for vulnerabilities and agentic risk
The Pinboard workflow includes approval safeguards, but its required CLI can also change installed agent skills without clearly disclosing those effects.
Review the CLI installation and its effects on other agents before proceeding. Use a reviewed CLI release and set OO_SKILLS_SYNC_DISABLED=1 if you do not want automatic skill synchronization, as documented in the [CLI controls](https://github.com/oomol-lab/oo-cli/blob/main/docs/commands.md#environment-variables). OOMOL will mediate your Pinboard requests. The remote installer and hosted connector were not fully verified; the review concern is under-disclosed local changes, with no evidence of intentional data theft.
The supplied code performs remote installer execution rather than any visible Pinboard operation. Although installation can be a supporting implementation detail, this chunk provides no evidence that the Oomol installer supports the declared Pinboard functionality. The downloaded script's contents and downstream effects are not available for assessment.
The setup instructions pipe a remotely fetched, unpinned script directly into Bash, allowing its contents to execute with the agent process's permissions without prior integrity verification. The domain is relevant to the required dependency and installation is conditional, which reduces suspicion of malicious intent, but a compromised distribution endpoint could still enable local data theft or modification; the PowerShell alternative has the same underlying risk.
oo: command not found — install the oo CLI (other platforms: https://cli.oomol.com/install-guide.md):
curl -fsSL https://cli.oomol.com/install.sh | bash # macOS / Linux
Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.
- **`OOMOL_INSUFFICIENT_CREDIT`** — OOMOL billing stop. Recharge at `https://console.oomol.com/billing/token-recharge` before retrying.
- **HTTP 402 without `OOMOL_INSUFFICIENT_CREDIT`** — the third-party account itself has no active plan or credit. Report the provider error message as is; do not ask the user to recharge OOMOL.
## Resources