ClawHub
Back to skill

Security audit

Tisane

Security checks for vulnerabilities and agentic risk

Overview

The skill appears coherent and disclosed, but its setup instructions include a risky one-line remote installer that users should verify before running.

Install only if you trust OOMOL and want this skill to use the `oo` CLI. Prefer following OOMOL’s official installation guide, reviewing the installer, and using checksum or signature verification where available instead of blindly running the pipe-to-shell command.

SkillSpector

Vulnerability Patterns
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (1)

External Script Fetching

High
Category
Supply Chain
Content
- **`oo: command not found`** — install the oo CLI (other platforms: <https://cli.oomol.com/install-guide.md>):

  ```bash
  curl -fsSL https://cli.oomol.com/install.sh | bash    # macOS / Linux
  ```

  ```powershell
Confidence
97% confidence
Finding
The skill instructs users to install software via `curl ... | bash`, which executes a remotely fetched script without prior integrity verification. If the install endpoint, transport, hosting, or upstream distribution is compromised, this can lead to arbitrary code execution on the user's machine.

Static analysis

No suspicious patterns detected.