ClawHub
Back to skill

Security audit

Doubao Speech

Security checks for vulnerabilities and agentic risk

Overview

The skill is mostly coherent for using Doubao Speech through OOMOL, but its first-time setup tells users to pipe a remote installer directly into a shell.

Before installing, review OOMOL's official CLI installation method and prefer a package manager, pinned release, or downloaded installer you can inspect and verify. Only connect Doubao Speech if you trust OOMOL to broker the connector credentials, and confirm write payloads before submitting speech tasks.

SkillSpector

Vulnerability Patterns
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (1)

External Script Fetching

High
Category
Supply Chain
Content
- **`oo: command not found`** — install the oo CLI (other platforms: <https://cli.oomol.com/install-guide.md>):

  ```bash
  curl -fsSL https://cli.oomol.com/install.sh | bash    # macOS / Linux
  ```

  ```powershell
Confidence
95% confidence
Finding
The skill instructs the agent to install software by piping a remotely fetched script directly into a shell (`curl ... | bash`). This creates a supply-chain and remote-code-execution risk because any compromise of the hosting endpoint, TLS interception, or unexpected script change would result in arbitrary code execution on the user's machine without prior inspection.

Static analysis

No suspicious patterns detected.