ClawHub
Back to skill

Security audit

Discord

Security checks across malware telemetry and agentic risk

Overview

This skill is a disclosed Discord connector that uses OOMOL's oo CLI and includes clear user-confirmation rules for state-changing actions.

Install this only if you trust OOMOL as the connector provider and intend to let the agent use your connected Discord account. Review write or destructive Discord requests carefully before approving them, and treat the first-time oo CLI installer/auth steps as setup actions you should run only when needed.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

VirusTotal

63/63 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.