Security audit
Zammad
Security checks for vulnerabilities and agentic risk
Overview
The skill is a clearly disclosed Zammad connector wrapper that uses the scoped oo CLI and tells agents to confirm write actions before changing tickets.
Install only if you trust OOMOL and want your agent to use your connected Zammad account. Review write payloads carefully before approving ticket creation, article creation, or ticket updates, because those actions change support data visible to your organization or customers.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.