ClawHub
Back to skill

Security audit

WeCom MCP

Security checks for vulnerabilities and agentic risk

Overview

This skill is a disclosed WeCom integration that uses OOMOL's `oo` CLI to access a connected WeCom MCP account, with explicit cautions for write and destructive actions.

Install only if you intend to let Codex use your OOMOL-connected WeCom MCP account. Review any live tool schema before approving write or destructive actions, and only run the CLI install/login steps if you trust OOMOL and need the connector configured.

SkillSpector

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Static analysis

No suspicious patterns detected.