Security audit
Security checks for vulnerabilities and agentic risk
The Trendshift lookups fit the stated purpose, but a missing CLI can lead the agent to execute an unverified remote installer without asking you.
Review the setup behavior before installing. Install a pinned, verified CLI release separately and require approval before the agent installs software. Review the CLI's automatic skill installation behavior and connect only the intended Trendshift account through OOMOL. The supplied artifact supports an installation-control concern, not a finding of theft or malicious intent; remote installer and hosted connector behavior remain unverified.
Installing the connector CLI is related to the skill's purpose, so the non-Trendshift domain alone is not suspicious. However, the fallback expands a read-only data request into execution of mutable remote code without integrity verification or explicit installation approval, potentially compromising the agent's local environment.
The supplied code performs a login operation rather than the declared Trendshift data-access functionality. Authentication could be a supporting implementation detail, but nothing in this chunk establishes that oo auth login authenticates to Trendshift or supports its integration.
The command pipes an unpinned remote response directly into Bash, allowing the installation endpoint or its delivery chain to determine what runs locally. HTTPS protects transport but does not establish artifact integrity if the distribution source is compromised; the resulting code could access files and credentials available to the executing process.
oo: command not found — install the oo CLI (other platforms: https://cli.oomol.com/install-guide.md):
curl -fsSL https://cli.oomol.com/install.sh | bash # macOS / Linux
The missing-command fallback instructs installation using remotely fetched shell or PowerShell code without requiring consent for local system changes. Although conditional and operationally relevant, this can turn an ordinary data lookup into arbitrary code execution with the agent process's permissions.
Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.
- **`OOMOL_INSUFFICIENT_CREDIT`** — OOMOL billing stop. Recharge at `https://console.oomol.com/billing/token-recharge` before retrying.
- **HTTP 402 without `OOMOL_INSUFFICIENT_CREDIT`** — the third-party account itself has no active plan or credit. Report the provider error message as is; do not ask the user to recharge OOMOL.
## Resources
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
## Resources
- Trendshift homepage: https://trendshift.io/
- API documentation: https://api.trendshift.io/docs