ClawHub
Back to skill

Security audit

BidSketch

Security checks for vulnerabilities and agentic risk

Overview

The skill appears purpose-aligned, with a visible but risky CLI install command users should review before running.

Before installing, review the OOMOL CLI installer source or use the official install guide/package manager if available. Run the installer only in an environment where you are comfortable allowing it to modify your user-level shell/CLI setup.

SkillSpector

Vulnerability Patterns
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (1)

External Script Fetching

High
Category
Supply Chain
Content
- **`oo: command not found`** — install the oo CLI (other platforms: <https://cli.oomol.com/install-guide.md>):

  ```bash
  curl -fsSL https://cli.oomol.com/install.sh | bash    # macOS / Linux
  ```

  ```powershell
Confidence
97% confidence
Finding
The skill instructs the agent to install software via a remote script piped directly into a shell (`curl ... | bash`), which is a well-known supply-chain risk. If the remote host, network path, or install script is compromised, arbitrary code could execute on the user's machine with the user's privileges.

Static analysis

No suspicious patterns detected.