ClawHub
Back to skill

Security audit

ReadMe

Security checks for vulnerabilities and agentic risk

Overview

The skill’s ReadMe integration is mostly coherent, but its fallback setup tells the agent to run an unpinned remote installer script, which deserves user review before installation.

Review the oo CLI installer before running it, prefer an official signed or checksum-verified installation path if available, and only connect a ReadMe account whose permissions match the tasks you want the agent to perform. Treat write and destructive ReadMe actions as sensitive and approve exact targets and payloads before use.

SkillSpector

Vulnerability Patterns
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (1)

External Script Fetching

High
Category
Supply Chain
Content
- **`oo: command not found`** — install the oo CLI (other platforms: <https://cli.oomol.com/install-guide.md>):

  ```bash
  curl -fsSL https://cli.oomol.com/install.sh | bash    # macOS / Linux
  ```

  ```powershell
Confidence
98% confidence
Finding
The skill instructs users to install software via `curl ... | bash`, which executes a remote script directly without prior verification, integrity checking, or pinned versioning. If the hosting site, transport path, or script content is compromised, this can lead to arbitrary code execution on the user's machine.

Static analysis

No suspicious patterns detected.