ClawHub
Back to skill

Security audit

Brave Search

Security checks for vulnerabilities and agentic risk

Overview

This is a clearly scoped Brave Search connector skill, with one disclosed but risky CLI install command users should review before running.

Install this if you want your agent to perform Brave searches through an OOMOL-connected account. Before running the one-line oo CLI installer, review OOMOL's official install guide or installer script; once installed, the skill's normal actions are read-only search operations.

SkillSpector

Vulnerability Patterns
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (1)

External Script Fetching

High
Category
Supply Chain
Content
- **`oo: command not found`** — install the oo CLI (other platforms: <https://cli.oomol.com/install-guide.md>):

  ```bash
  curl -fsSL https://cli.oomol.com/install.sh | bash    # macOS / Linux
  ```

  ```powershell
Confidence
98% confidence
Finding
The skill instructs users to install software via a direct network fetch piped into shell execution (`curl ... | bash`), which is a well-known unsafe pattern. If the install endpoint, transport, hosting, or downstream script supply chain is compromised, arbitrary code would execute immediately on the user's machine with the user's privileges.

Static analysis

No suspicious patterns detected.