ClawHub
Back to skill

Security audit

BoxHero

Security checks for vulnerabilities and agentic risk

Overview

This skill provides disclosed, read-only BoxHero inventory access through the OOMOL oo CLI and does not show malicious or hidden behavior.

Install only if you trust OOMOL and intend to let an agent read BoxHero inventory data through your connected account. If the oo CLI is not installed, review the installer URL before running the one-time setup command.

SkillSpector

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Static analysis

No suspicious patterns detected.