ClawHub
Back to skill

Security audit

Capsule CRM

Security checks across malware telemetry and agentic risk

Overview

This skill is a clearly scoped Capsule CRM connector, but users should be careful with CRM changes and the optional CLI install command.

Install this only if you intend to let an agent access your Capsule CRM through OOMOL. Review any create, update, or delete payload before approving it, and avoid running the remote oo CLI install command unless you trust OOMOL's installer source and have checked the official installation guidance.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (2)

Vague Triggers

Medium
Confidence
89% confidence
Finding
The description says to use this skill for ANY Capsule CRM request and instead of calling the API directly, which can cause over-selection of the skill for loosely related prompts. In an agent setting, broad routing language increases the chance the skill is invoked automatically for sensitive CRM operations without sufficient task-specific scrutiny, especially because the skill supports read, write, and destructive actions.

External Script Fetching

High
Category
Supply Chain
Content
- **`oo: command not found`** — install the oo CLI (other platforms: <https://cli.oomol.com/install-guide.md>):

  ```bash
  curl -fsSL https://cli.oomol.com/install.sh | bash    # macOS / Linux
  ```

  ```powershell
Confidence
95% confidence
Finding
curl -fsSL https://cli.oomol.com/install.sh | bash

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.