ClawHub
Back to skill

Security audit

TikHub

Security checks for vulnerabilities and agentic risk

Overview

The TikHub connector skill is mostly coherent, but its fallback install instructions tell the agent to run an unverified remote installer script, which needs user review before use.

Review the oo CLI installation path before installing. Prefer installing the CLI from trusted OOMOL documentation with verification, then use the skill only for TikHub actions you intend to run, especially account information or endpoint invocation requests.

SkillSpector

Vulnerability Patterns
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (2)

External Script Fetching

High
Category
Supply Chain
Content
- **`oo: command not found`** — install the oo CLI (other platforms: <https://cli.oomol.com/install-guide.md>):

  ```bash
  curl -fsSL https://cli.oomol.com/install.sh | bash    # macOS / Linux
  ```

  ```powershell
Confidence
98% confidence
Finding
The skill instructs the agent to install software by piping a remotely fetched script directly into a shell (`curl ... | bash`). If the remote host, transport, or install script is compromised, this yields immediate arbitrary code execution on the user's machine. In a skill context, embedding this as an operational fallback is especially risky because it normalizes execution of unverified remote code during routine task handling.

Vague Triggers

Medium
Confidence
96% confidence
Finding
Line L03 says to use this skill for "ANY TikHub request" and "Whenever a task involves TikHub," which is a broad activation condition without clear boundaries or exclusions. This can overlap with many loosely related requests and may cause unintended invocation when TikHub is only tangentially mentioned.

Static analysis

No suspicious patterns detected.