ClawHub
Back to skill

Security audit

ActiveTrail

Security checks for vulnerabilities and agentic risk

Overview

This skill is a clearly scoped ActiveTrail connector that can read and change contacts or groups, with destructive actions disclosed and approval required.

Before installing, understand that this skill can modify or delete ActiveTrail contacts and groups through your connected OOMOL account. Only approve write or destructive actions after checking the exact target and payload, and run the oo CLI installer only if you trust OOMOL's installation source.

SkillSpector

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Static analysis

No suspicious patterns detected.