ClawHub
Back to skill

Security audit

tl;dv

Security checks for vulnerabilities and agentic risk

Overview

This tl;dv connector skill is mostly coherent, but its first-time setup tells the agent to install a CLI by executing a remote script without verification or clear user approval.

Review the CLI installation step before installing. Prefer installing oo from verified official instructions, with a pinned version or signature/checksum verification where available. Also be aware that enabled actions can read private tl;dv meeting notes and transcripts, and imports should only be run after confirming the exact recording URL and effect.

SkillSpector

Vulnerability Patterns
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (2)

External Script Fetching

High
Category
Supply Chain
Content
- **`oo: command not found`** — install the oo CLI (other platforms: <https://cli.oomol.com/install-guide.md>):

  ```bash
  curl -fsSL https://cli.oomol.com/install.sh | bash    # macOS / Linux
  ```

  ```powershell
Confidence
96% confidence
Finding
The skill instructs the agent to install software via `curl ... | bash`, which downloads and immediately executes a remote script without integrity verification or pinning. If the host, network path, or distribution endpoint is compromised, this can lead to arbitrary code execution on the user's machine.

Vague Triggers

Medium
Confidence
91% confidence
Finding
The description declares that any task involving tl;dv should invoke this skill, covering reading, creating, and updating data without narrowing context or providing exclusions. This broad phrasing can overlap with many ordinary requests that merely mention tl;dv, increasing the chance of unintended invocation.

Static analysis

No suspicious patterns detected.