ClawHub
Back to skill

Security audit

SendGrid

Security checks for vulnerabilities and agentic risk

Overview

This appears to be a disclosed OOMOL CLI connector skill, but users should be careful with its optional remote installer command.

Install only if you trust OOMOL and want this connector to operate the linked service. If the oo CLI is missing, prefer official installation documentation or verify the installer before running it; do not blindly pipe remote scripts into a shell.

SkillSpector

Vulnerability Patterns
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (1)

External Script Fetching

High
Category
Supply Chain
Content
- **`oo: command not found`** — install the oo CLI (other platforms: <https://cli.oomol.com/install-guide.md>):

  ```bash
  curl -fsSL https://cli.oomol.com/install.sh | bash    # macOS / Linux
  ```

  ```powershell
Confidence
98% confidence
Finding
The skill instructs the agent to install software via `curl ... | bash`, which executes a remote script directly from the network without integrity verification or pinning. If the install endpoint, transport, DNS, or hosting is compromised, this becomes arbitrary code execution on the host running the skill.

Static analysis

No suspicious patterns detected.