Skill Trust Decision
oo-docsumo
Skill provides legitimate Docsumo API wrapper via oo CLI but contains documented curl|bash remote script execution pattern in first-time setup, which poses supply-chain risk.
Most direct threat evidence
High Supply Chain
Remote script execution via curl|bash First-time setup includes curl -fsSL https://cli.oomol.com/install.sh | bash which downloads and executes arbitrary shell scripts from the internet without integrity verification.
SKILL.md:60 Why this conclusion was reached
2/4 dimensions flagged Pass
Declared vs actual capability
Declared resources and inferred behavior are broadly aligned.
Block
Hidden execution and egress
1 high-risk artifacts or egress signals were extracted.
Block
Attack chain and severe findings
The report includes 0 attack-chain steps and 2 severe findings.
Review
Dependencies and supply chain hygiene
1 dependency or supply-chain issues need attention.
What drove the risk score up
curl|bash remote script execution +25
SKILL.md:60 contains curl -fsSL https://cli.oomol.com/install.sh | bash with no version pinning or integrity check
PowerShell equivalent remote execution +10
SKILL.md:63 contains irm https://cli.oomol.com/install.ps1 | iex pattern
Supply chain risk unmitigated +7
No pinned versions or checksums for downloaded installer scripts
Most important evidence
High Supply Chain
Remote script execution via curl|bash
First-time setup includes curl -fsSL https://cli.oomol.com/install.sh | bash which downloads and executes arbitrary shell scripts from the internet without integrity verification.
SKILL.md:60 Replace with direct binary download: curl -fsSL https://cli.oomol.com/releases/oo-$(uname -s)-$(uname -m).tar.gz | tar xz && mv oo /usr/local/bin/ or provide SHA256 checksum verification.
High Supply Chain
PowerShell remote script execution
Windows installation uses irm URL | iex pattern which downloads and executes PowerShell scripts from the internet.
SKILL.md:63 Provide signed installer or direct binary download with checksum verification.
Low Doc Mismatch
Conditional trigger reduces risk
The remote script execution only triggers when 'oo: command not found' error occurs, reducing likelihood of accidental execution. skill-card.md discloses this risk.
SKILL.md:53 Document this is only for initial setup and confirm user intent before proceeding.
Declared capability vs actual capability
Shell Pass
Declared WRITE
→ Inferred WRITE
SKILL.md:14-15 Bash(oo *) declaration allows all oo commands including connector operations Suspicious artifacts and egress
Critical Dangerous Command
curl -fsSL https://cli.oomol.com/install.sh | bash SKILL.md:60
Medium External URL
https://static.oomol.com/logo/third-party/docsumo.svg SKILL.md:10
Medium External URL
https://cli.oomol.com/install-guide.md SKILL.md:57
Medium External URL
https://cli.oomol.com/install.sh SKILL.md:60
Medium External URL
https://cli.oomol.com/install.ps1 SKILL.md:64
Medium External URL
https://console.oomol.com/app-connections?provider=docsumo SKILL.md:76
Medium External URL
https://console.oomol.com/billing/token-recharge SKILL.md:79
Medium External URL
https://www.docsumo.com SKILL.md:83
Medium External URL
https://clawhub.ai/user/oomol skill-card.md:9
Medium External URL
https://clawhub.ai/oomol/skills/oo-docsumo skill-card.md:42
Dependencies and supply chain
| Package | Version | Source | Known vuln | Notes |
|---|---|---|---|---|
| oo-cli | * | https://cli.oomol.com/install.sh | No | No version pinning; remote script execution with curl|bash |
File composition
3 files · 148 lines
Markdown 2 files · 143 linesJSON 1 files · 5 lines
Files of concern · 2
SKILL.md Remote script execution via curl|bash · PowerShell remote script execution · Conditional trigger reduces risk · curl -fsSL https://cli.oomol.com/install.sh | bash · https://static.oomol.com/logo/third-party/docsumo.svg · https://cli.oomol.com/install-guide.md · https://cli.oomol.com/install.sh · https://cli.oomol.com/install.ps1 · https://console.oomol.com/app-connections?provider=docsumo · https://console.oomol.com/billing/token-recharge · https://www.docsumo.com
skill-card.md https://clawhub.ai/user/oomol · https://clawhub.ai/oomol/skills/oo-docsumo
Other files · _meta.json
Security positives
skill-card.md explicitly discloses remote installer risk with mitigations
All Docsumo operations use the oo CLI which is a legitimate, documented tool
Credential handling is delegated to oo CLI with server-side injection (no raw token exposure)
Write operations are tagged [write] requiring user confirmation
Destructive operations are tagged [destructive] requiring explicit approval
Actions are limited to documented connector operations, no arbitrary code execution