World News API

• Outcome: Review
• Latest audit: Sep 16, 2026 · 9:13 AM UTC
• Version: 1.0.3

Overview

The skill is a coherent World News API connector, but its setup instructions include running an unverified remote installer directly in a shell.

Before installing, prefer official package-manager or signed, version-pinned installation steps for the oo CLI. If you use this skill, review any installer before running it, understand that OOMOL mediates the World News API connection, and only connect the account you intend the agent to use for news queries.

A.I.G

Vulnerability Patterns

• Remote Payload Retrieval and Execution: Fetches external code whose behavior can change after review
• Skill Instruction Hijacking: Alters the agent's session goals or safety constraints when the skill loads
• Agent Memory Poisoning: Writes attacker-controlled rules into memory that affect later sessions
• Embedded Malicious Code: Ships malicious scripts inside the skill and executes them locally
• Unauthorized Access and Privilege Escalation: Obtains permissions beyond the task's legitimate needs

Findings (1)

T03 · Remote Payload Retrieval and Execution

Error

• Location: SKILL.md:59

Finding

Unverified Remote Installer Download and Immediate Execution

Content

View full analysis

Remediation

View remediation

SkillSpector

Vulnerability Patterns

• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access

Findings (2)

External Script Fetching

High

• Category: Supply Chain
• Confidence: 97% confidence

Finding

The skill instructs users to install software via a remote script piped directly into a shell (curl ... | bash), which executes unverified code fetched at runtime. If the remote host, transport, installer, or distribution path is compromised, this can lead to arbitrary code execution on the user's machine.

Content

Scanner excerpt · SKILL.md (reported line 59)May include surrounding context.

• oo: command not found — install the oo CLI (other platforms: https://cli.oomol.com/install-guide.md):

  bash

  curl -fsSL https://cli.oomol.com/install.sh | bash    # macOS / Linux
  

  powershell

Vague Triggers

Medium

• Category: Not specified by scanner
• Confidence: 96% confidence

Finding

The description says to use this skill for 'ANY World News API request,' which is a very broad activation condition for a manifest/markdown file. It does not provide negative examples or scope boundaries, so the trigger could match loosely phrased tasks whenever World News API is merely mentioned.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.