Security audit
Security checks for vulnerabilities and agentic risk
The Terraform read workflow fits its purpose, but fallback setup executes unverified remote installers without first requesting your approval.
Before use, install a reviewed, pinned CLI release yourself and review any changes it makes to installed agent skills. Use a Terraform API key limited to the reads you need, and understand that OOMOL brokers access to your account. The bundled text shows no credential theft or destructive Terraform operation, but it cannot establish the safety of mutable remote installers or hosted services.
The supplied command performs remote installer execution rather than Terraform data retrieval. Nothing in the chunk establishes this installer as a supporting dependency for the declared Terraform functionality. The downloaded script's contents are not supplied, so its further effects cannot be determined.
Authentication can be a supporting implementation detail, but the supplied chunk contains only a login command and establishes no connection to Terraform access. As supplied, its primary behavior differs materially from the declared purpose. The command alone does not establish credential theft or data exfiltration.
The command pipes mutable, remotely fetched content directly into Bash without version pinning or independent integrity verification; the PowerShell alternative has the same weakness. Compromise of the distribution endpoint or release pipeline could execute attacker-controlled code with the agent's OS permissions, potentially exposing local files and credentials; HTTPS and the legitimate dependency context do not eliminate this supply-chain risk.
oo: command not found — install the oo CLI (other platforms: https://cli.oomol.com/install-guide.md):
curl -fsSL https://cli.oomol.com/install.sh | bash # macOS / Linux
A missing CLI triggers instructions to install software by executing a remote script without first obtaining approval for local system changes. Although conditional and operationally relevant, this expands a Terraform read request into code execution and installation; the declared Bash tool restriction may limit execution but is not a substitute for a safe setup policy.
Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.
- **`OOMOL_INSUFFICIENT_CREDIT`** — OOMOL billing stop. Recharge at `https://console.oomol.com/billing/token-recharge` before retrying.
- **HTTP 402 without `OOMOL_INSUFFICIENT_CREDIT`** — the third-party account itself has no active plan or credit. Report the provider error message as is; do not ask the user to recharge OOMOL.
## Resources