setup — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited setup (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
OloLand authenticates via OAuth (one-click sign-in) — there is no key to copy for normal use. The plugin's MCP server is OAuth-native: connecting it opens a sign-in page at api.ololand.ai, you approve, and you're done.
plugin settings.
in with email or Google and click Approve.
/dd-analyze — Run full due diligence on a deal/similar-deals — Find comparable transactionsIf you see OloLand tools in your tools list, you're connected.
The sign-in runs on a single canonical host and self-heals the browser handoff, so it works in Cowork and Desktop. If a sign-in window doesn't return on the first try, just reconnect the server and approve again.
Automated environments can't do an interactive sign-in, so they use a long-lived agent key as a Bearer token instead:
new key** (starts with olo_agent_sk_).
export OLOLAND_AGENT_KEY=olo_agent_sk_...(the published plugin manifest is OAuth-native and does not send one, so add it in your own config):
{
"mcpServers": {
"ololand": {
"type": "http",
"url": "https://api.ololand.ai/mcp",
"headers": { "Authorization": "Bearer ${OLOLAND_AGENT_KEY}" }
}
}
}The agent key works in every MCP host and never expires until you revoke it.
Reconnect it and complete the OAuth sign-in (interactive), or check your OLOLAND_AGENT_KEY + Authorization header (headless).
the handoff is self-healing and the second attempt typically completes. If it still stalls, generate an agent key (see Headless / CI) and use that.
[email protected] to upgrade.
60 seconds (Cloud Run cold start).
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.