Back to skill

Security audit

WHO Global Health Observatory

Security checks for vulnerabilities and agentic risk

Overview

This skill is a disclosed read-only connector for WHO Global Health Observatory data, with no evidence of hidden or destructive behavior.

Before installing, understand that this routes WHO GHO requests through the OOMOL oo CLI and may require installing/signing into that CLI if it is not already available. The reviewed actions are read-only data access actions.

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Static analysis

No suspicious patterns detected.