Security audit

Truvera

Security checks for vulnerabilities and agentic risk

Overview

The skill is mostly coherent for managing Truvera through OOMOL, but its first-time setup tells agents to execute unverified remote installer scripts, which needs human review before use.

Review the OOMOL CLI installation path before installing this skill. Prefer installing the CLI from verified, versioned documentation or a trusted package manager, and do not let an agent run the remote installer commands automatically. For normal Truvera actions, confirm any write or delete payload before execution.

A.I.G

Vulnerability Patterns

Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

Findings (1)

T03 · Remote Payload Retrieval and Execution

Error

Location: SKILL.md:64
Finding: Unverified Remote Installer Download and Execution
Content: View full analysis
Remediation: View remediation

SkillSpector

Vulnerability Patterns

Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

External Script Fetching

High

Category: Supply Chain
Confidence: 98% confidence
Finding: The skill instructs the agent to install software by piping a remotely fetched script directly into a shell (curl ... | bash). This is dangerous because it executes unaudited code from the network without integrity verification, and an attacker who compromises the distribution server, DNS/TLS path, or script supply chain could achieve arbitrary code execution on the host.
Content: Scanner excerpt · SKILL.md (reported line 64)May include surrounding context.

oo: command not found — install the oo CLI (other platforms: https://cli.oomol.com/install-guide.md):

bash
curl -fsSL https://cli.oomol.com/install.sh | bash # macOS / Linux

powershell

Static analysis

No suspicious patterns detected.