ClawHub
Back to skill

Security audit

AccuLynx

Security checks for vulnerabilities and agentic risk

Overview

This appears to be a legitimate AccuLynx connector, but it needs review because it combines broad invocation language with write-capable business-system access and a pipe-to-shell installer fallback.

Install only if you intend to let an agent operate AccuLynx through OOMOL. Use a least-privileged AccuLynx/OOMOL account, confirm every create/update/delete action and payload, and avoid letting the agent run the remote installer automatically; install the CLI through a trusted, verified path where possible.

SkillSpector

Vulnerability Patterns
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (2)

Vague Triggers

Medium
Confidence
91% confidence
Finding
The skill description says to use this skill for ANY AccuLynx request, which creates an overly broad routing trigger and can cause the agent to invoke it for all AccuLynx-related tasks without narrower intent checks. In a skill that includes write-capable actions, this increases the chance of unintended use, mistaken tool selection, and accidental state-changing operations being funneled through a single connector path.

External Script Fetching

High
Category
Supply Chain
Content
- **`oo: command not found`** — install the oo CLI (other platforms: <https://cli.oomol.com/install-guide.md>):

  ```bash
  curl -fsSL https://cli.oomol.com/install.sh | bash    # macOS / Linux
  ```

  ```powershell
Confidence
98% confidence
Finding
The skill instructs users to install the CLI via a remote script piped directly into a shell (`curl ... | bash`), which executes unreviewed code fetched at runtime. If the hosting endpoint, transport, or distribution pipeline is compromised, this can lead to immediate arbitrary code execution on the user's machine.

Static analysis

No suspicious patterns detected.