ClawHub
Back to skill

Security audit

Doubao Seedream

Security checks for vulnerabilities and agentic risk

Overview

The skill is mostly coherent for using Doubao Seedream through OOMOL, but its setup path asks agents to execute a live remote installer and its generation action is under-scoped.

Review before installing. Prefer installing the oo CLI through a verified official package or documented manual process rather than executing a remotely fetched script directly. Confirm image-generation prompts, source images, and any credit-consuming actions before allowing the skill to run them.

SkillSpector

Vulnerability Patterns
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (1)

External Script Fetching

High
Category
Supply Chain
Content
- **`oo: command not found`** — install the oo CLI (other platforms: <https://cli.oomol.com/install-guide.md>):

  ```bash
  curl -fsSL https://cli.oomol.com/install.sh | bash    # macOS / Linux
  ```

  ```powershell
Confidence
94% confidence
Finding
The skill instructs the agent/user to install software by piping a remotely fetched script directly into a shell (`curl ... | bash`). This bypasses integrity verification, review, and pinning, so if the hosting endpoint, network path, or upstream release process is compromised, arbitrary code will execute on the local machine.

Static analysis

No suspicious patterns detected.