Security audit
Security checks for vulnerabilities and agentic risk
The Wolfram|Alpha workflow is coherent, but its automatic setup allows unchecked software execution and broader agent changes than the skill explains.
Review the setup before enabling this skill. Prefer a reviewed, pinned CLI installation and decide whether to allow its additional agent skills; the CLI documents OO_SKILLS_SYNC_DISABLED to disable startup synchronization. Queries pass through OOMOL and may incur charges. The remote installers and hosted connector were not verified.
The supplied command runs an Oomol-hosted installer, not a Wolfram|Alpha search or data-reading operation. Nothing in the supplied code establishes that this installation supports the declared purpose. The downloaded script's contents and further effects are not provided, but downloading and executing it is directly observable and materially different from the described behavior.
Authentication could be a supporting implementation detail if it were demonstrably associated with the declared service. Here, the entire supplied implementation is an authentication command for an unidentified CLI, with no evidence connecting it to Wolfram|Alpha. Its observable purpose therefore differs materially from the declared search-and-read functionality.
The curl-to-bash pipeline executes whatever script the remote endpoint currently returns, without pinning or authenticating a specific release artifact. Although installing the CLI supports the documented workflow, compromise of its distribution infrastructure could turn a routine setup action into arbitrary code execution and expose local files or credentials.
oo: command not found — install the oo CLI (other platforms: https://cli.oomol.com/install-guide.md):
curl -fsSL https://cli.oomol.com/install.sh | bash # macOS / Linux
When the CLI is missing, the setup instructions direct immediate execution of remote shell or PowerShell scripts without explicit installation approval or artifact verification. A compromised distribution endpoint or installer could execute arbitrary code with the invoking user's privileges; the error-gated fallback reduces exposure but does not remove this risk.
Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.
- **`OOMOL_INSUFFICIENT_CREDIT`** — OOMOL billing stop. Recharge at `https://console.oomol.com/billing/token-recharge` before retrying.
- **HTTP 402 without `OOMOL_INSUFFICIENT_CREDIT`** — the third-party account itself has no active plan or credit. Report the provider error message as is; do not ask the user to recharge OOMOL.
## Resources