Security audit
Security checks for vulnerabilities and agentic risk
The document operations are controlled, but setup directs the agent to run unverified downloaded software without a separate approval step.
Review setup before enabling this skill. Install a reviewed, integrity-verified CLI version yourself and check its agent-skill installation settings. Your document requests use OOMOL and its connected account permissions. The sole bundled file was fully inspected; the external installers and hosted connector implementation remain unverified.
The supplied chunk performs remote software installation rather than any visible Tencent Docs operation. Installing a dependency could be a supporting implementation detail, but the supplied content does not establish that connection. The downloaded script's contents are unavailable, so its further behavior cannot be assessed.
Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.
- `convert_file_id` — Convert between Tencent Docs fileID and encodedID values.
- `create_file` — Create a Tencent Docs online document, sheet, form, slide, or smart sheet. [write]
- `generate_form_result` — Generate the result spreadsheet for a Tencent Docs form. [write]
- `get_current_user` — Get the current Tencent Docs user profile for the OAuth access token.
- `get_doc_content` — Get the structured content and version of a Tencent Docs document.
- `get_export_progress` — Check a Tencent Docs asynchronous export operation and return the download URL when ready.
- `get_file_metadata` — Get Tencent Docs metadata for one file by file ID.
Piping an unpinned HTTPS response directly into bash executes whatever the installer endpoint returns without an independent integrity check or review. Compromise of the distribution endpoint could yield arbitrary code execution with the agent's privileges; HTTPS and the legitimate CLI setup purpose do not eliminate that supply-chain risk.
oo: command not found — install the oo CLI (other platforms: https://cli.oomol.com/install-guide.md):
curl -fsSL https://cli.oomol.com/install.sh | bash # macOS / Linux
The setup instructions direct execution of remote shell and PowerShell installers without first requiring user approval for local code execution and system changes. The missing-CLI condition limits exposure, but an ordinary Tencent Docs request could still trigger installation with the agent's local privileges.
Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.
- **`OOMOL_INSUFFICIENT_CREDIT`** — OOMOL billing stop. Recharge at `https://console.oomol.com/billing/token-recharge` before retrying.
- **HTTP 402 without `OOMOL_INSUFFICIENT_CREDIT`** — the third-party account itself has no active plan or credit. Report the provider error message as is; do not ask the user to recharge OOMOL.
## Resources