ClawHub
Back to skill

Security audit

Linguapop

Security checks for vulnerabilities and agentic risk

Overview

This skill is a disclosed OOMOL connector wrapper for Linguapop, with a notable but user-visible caution around its optional CLI install command.

Install this only if you intend to let Codex use your OOMOL-connected Linguapop account. Confirm any placement-test invitation details before approving a write action, and avoid running the pipe-to-shell installer unless you trust OOMOL’s CLI distribution path or have verified it through official install guidance.

SkillSpector

Vulnerability Patterns
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (2)

Vague Triggers

Medium
Confidence
92% confidence
Finding
The skill description says to use this skill for ANY Linguapop request and instead of calling the API directly, which creates very broad routing semantics. That can cause the agent to invoke this skill in loosely related contexts without clear task boundaries or user confirmation, increasing the chance of unintended data access or write operations through a connected third-party account.

External Script Fetching

High
Category
Supply Chain
Content
- **`oo: command not found`** — install the oo CLI (other platforms: <https://cli.oomol.com/install-guide.md>):

  ```bash
  curl -fsSL https://cli.oomol.com/install.sh | bash    # macOS / Linux
  ```

  ```powershell
Confidence
98% confidence
Finding
The skill instructs users to install the CLI via `curl ... | bash`, which executes a remotely fetched script without integrity verification, pinning, or review. If the distribution server, transport path, or script content is compromised, this becomes a direct arbitrary code execution path on the user's machine.

Static analysis

No suspicious patterns detected.