Security audit
Security checks for vulnerabilities and agentic risk
The Referral Rock actions are appropriately limited, but setup allows remote code execution and broader agent changes without clearly scoped user approval.
Review and install a verified CLI release yourself before enabling this skill. Decide whether its automatic installation and synchronization of other agent skills is acceptable, and disable that behavior if unwanted. OOMOL is an explicitly disclosed intermediary for your connected Referral Rock account. The bundled instructions were fully reviewed, but the remote installers and deployed connector implementation were not verified.
The supplied command runs a remote installer, which is materially different from the declared Referral Rock search-and-read functionality. Nothing in the supplied chunk establishes this installation as a necessary supporting implementation detail. The downloaded script's contents and any further effects are not available for assessment.
Piping an unpinned HTTPS response directly into Bash executes whatever the endpoint returns, without an artifact integrity or authenticity check beyond transport security. A compromised endpoint or malicious installer update could execute arbitrary code with the agent's privileges; the legitimate setup context limits when this occurs but does not remove the risk, and this overlaps with SQP-2 rather than representing a separate exploit.
oo: command not found — install the oo CLI (other platforms: https://cli.oomol.com/install-guide.md):
curl -fsSL https://cli.oomol.com/install.sh | bash # macOS / Linux
The fallback setup directs the agent to execute downloaded shell or PowerShell code without first obtaining informed approval or verifying the downloaded artifact. Although installation is conditional and legitimately supports the connector, it can modify the host with the executor's privileges if the installer or its distribution infrastructure is compromised.
Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.
- **`OOMOL_INSUFFICIENT_CREDIT`** — OOMOL billing stop. Recharge at `https://console.oomol.com/billing/token-recharge` before retrying.
- **HTTP 402 without `OOMOL_INSUFFICIENT_CREDIT`** — the third-party account itself has no active plan or credit. Report the provider error message as is; do not ask the user to recharge OOMOL.
## Resources
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
## Resources
- Referral Rock homepage: https://referralrock.com
- API documentation: https://api.referralrock.com/help