ClawHub
Back to skill

Security audit

Wolfram|Alpha

Security checks for vulnerabilities and agentic risk

Overview

This Wolfram|Alpha connector skill is mostly coherent, but it tells the agent to install a CLI by running an unverified remote script directly in the shell.

Review before installing. The Wolfram|Alpha actions themselves are read-oriented and coherent, but do not let an agent run the documented remote installer automatically. Install the oo CLI only from a trusted official source, preferably with pinned version or verification, and connect only the Wolfram|Alpha account you intend to use.

SkillSpector

Vulnerability Patterns
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (1)

External Script Fetching

High
Category
Supply Chain
Content
- **`oo: command not found`** — install the oo CLI (other platforms: <https://cli.oomol.com/install-guide.md>):

  ```bash
  curl -fsSL https://cli.oomol.com/install.sh | bash    # macOS / Linux
  ```

  ```powershell
Confidence
97% confidence
Finding
The skill instructs the agent to install the CLI via `curl ... | bash`, which executes a remote script directly from the network without verification, pinning, or integrity checks. In an adversarial or compromised distribution scenario, this can lead to arbitrary code execution on the host running the skill, and the surrounding context makes it more dangerous because the instructions are framed as an operational fallback the agent may perform automatically when the CLI is missing.

Static analysis

No suspicious patterns detected.