ClawHub
Back to skill

Security audit

Encodian

Security checks for vulnerabilities and agentic risk

Overview

This Encodian skill is a disclosed connector wrapper, with a real but user-visible setup risk from the one-line CLI installer.

Install this only if you want an agent to operate Encodian through OOMOL. Review or manually install the OOMOL CLI instead of blindly running the pipe-to-shell command, and require explicit confirmation before any create or update action that changes Encodian data.

SkillSpector

Vulnerability Patterns
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (2)

Vague Triggers

Medium
Confidence
93% confidence
Finding
The description instructs use of this skill for ANY Encodian request, including reading, creating, and updating data, which can cause the agent to select it too broadly without considering whether the task is safe or whether additional confirmation is needed. In this skill, that broad routing is more dangerous because the listed actions include state-changing behavior and the skill also contains setup guidance that can lead to command execution.

External Script Fetching

High
Category
Supply Chain
Content
- **`oo: command not found`** — install the oo CLI (other platforms: <https://cli.oomol.com/install-guide.md>):

  ```bash
  curl -fsSL https://cli.oomol.com/install.sh | bash    # macOS / Linux
  ```

  ```powershell
Confidence
98% confidence
Finding
The skill recommends installing the CLI via a remote script piped directly into bash, which executes code fetched over the network without verification or review. If the install endpoint, transport, or distribution chain is compromised, this can result in arbitrary code execution on the user's machine.

Static analysis

No suspicious patterns detected.