Security audit
Security checks for vulnerabilities and agentic risk
The postal-code workflow fits its purpose, but its setup can execute unverified software and introduce broader agent changes without clear user control.
Review the CLI dependency before enabling this skill. Preinstall a reviewed version, disable automatic skill synchronization using the documented OO_SKILLS_SYNC_DISABLED control, and connect only the intended Zipcodebase account. Queries pass through OOMOL. The scanner's mismatch and billing concerns are unsupported in context; the material concerns are uncontrolled installation and broader persistent agent changes. Exact installer behavior remains unverified. [CLI controls](https://github.com/oomol-lab/oo-cli/blob/main/docs/commands.md)
The supplied command executes a remote installer and contains no Zipcodebase search or read operation. Nothing in the supplied chunk establishes this installer as a necessary supporting dependency for Zipcodebase access. The downloaded script's further behavior is not visible, but its immediate execution is directly established.
The supplied chunk only performs a login operation; it contains no Zipcodebase search or data-reading behavior. Authentication could support an API integration, but this code does not establish that relationship, and its sole visible function differs materially from the declared purpose.
Piping a mutable HTTPS response directly into Bash executes remote code without a separate verification or review step. HTTPS protects transport but does not protect against compromise of the legitimate distribution service; exploitation could expose local credentials and files or modify the user's environment.
oo: command not found — install the oo CLI (other platforms: https://cli.oomol.com/install-guide.md):
curl -fsSL https://cli.oomol.com/install.sh | bash # macOS / Linux
The fallback workflow directs execution of downloaded shell and PowerShell scripts without an explicit approval gate or integrity verification. Although conditional setup reduces exposure, a compromised distribution endpoint or altered installer could execute arbitrary code with the invoking user's permissions.
Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.
- **`OOMOL_INSUFFICIENT_CREDIT`** — OOMOL billing stop. Recharge at `https://console.oomol.com/billing/token-recharge` before retrying.
- **HTTP 402 without `OOMOL_INSUFFICIENT_CREDIT`** — the third-party account itself has no active plan or credit. Report the provider error message as is; do not ask the user to recharge OOMOL.
## Resources