Security audit
Clerk
Security checks across malware telemetry and agentic risk
Overview
This Clerk skill is a clearly disclosed OOMOL connector for managing Clerk users, including high-impact account changes that require user confirmation.
Install this only if you intend to let Codex operate Clerk through your OOMOL-connected account. Review write and destructive requests carefully, especially deletes, bans, locks, and metadata updates, and verify the OOMOL CLI installer source before running first-time setup.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
64/64 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.