ClawHub
Back to skill

Security audit

Demio

Security checks for vulnerabilities and agentic risk

Overview

This Demio skill is a coherent service connector with disclosed read and attendee-registration actions, and it requires user confirmation before writes.

Before installing, make sure you trust OOMOL as the intermediary for your Demio connection. Read actions can access Demio event and participant data, and attendee registration should only proceed after you verify the payload the agent plans to send.

SkillSpector

Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (1)

Vague Triggers

Medium
Confidence
89% confidence
Finding
The trigger language is overly broad and instructs the agent to use this skill for any Demio-related request, which can cause the skill to intercept a wide range of prompts without clear task boundaries. In an agent system, broad routing increases the chance of unintended tool use, including write operations like attendee registration, especially when user intent is ambiguous or only loosely related to Demio.

Static analysis

No suspicious patterns detected.