Security audit
Productlane
Security checks across malware telemetry and agentic risk
Overview
This skill is a clearly scoped Productlane connector that can read and modify Productlane data through OOMOL, with state-changing actions disclosed and confirmation required.
Install this only if you want Codex to act on your connected Productlane workspace through OOMOL. Review write or delete requests carefully before approving them, especially company or contact updates and soft-deletes. The skill does not show hidden persistence or token extraction, but it depends on your OOMOL account connection and may require installing the oo CLI if it is missing.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
64/64 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.