Security audit
urlscan.io
Security checks across malware telemetry and agentic risk
Overview
This urlscan.io skill is a clearly disclosed OOMOL CLI connector; the main cautions are the optional CLI installer and confirming scan submissions.
Install only if you are comfortable using OOMOL as the connector layer for urlscan.io. Prefer reviewing the oo CLI installer before running it, connect a minimally scoped urlscan.io API key, and confirm any URL submission because scans may expose the submitted URL to urlscan.io.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
64/64 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.