ClawHub
Back to skill

Security audit

Kalodata

Security checks for vulnerabilities and agentic risk

Overview

This skill is a disclosed Kalodata connector wrapper that uses the oo CLI for analytics queries and does not show hidden or destructive behavior.

Before installing, be comfortable using OOMOL as the intermediary for Kalodata queries and review any one-time CLI install or login step if it is triggered. The listed actions are read-oriented analytics calls, and the skill tells the agent not to start auth or connection setup unless a command fails for that reason.

SkillSpector

Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (1)

Vague Triggers

Medium
Confidence
93% confidence
Finding
The skill description says to use this skill for ANY Kalodata request and instead of calling the API directly, which is an overly broad routing rule that can cause the agent to invoke the skill in situations where a narrower or safer path would be more appropriate. Because the skill is allowed to run Bash commands and includes setup/install/auth flows, unintended activation increases the chance of unnecessary command execution, login prompts, or exposure to operational side effects during loosely related tasks.

Static analysis

No suspicious patterns detected.