安全决策报告
oo-docsumo
Skill provides legitimate Docsumo API wrapper via oo CLI but contains documented curl|bash remote script execution pattern in first-time setup, which poses supply-chain risk.
最直接的威胁证据
高危 供应链
Remote script execution via curl|bash First-time setup includes curl -fsSL https://cli.oomol.com/install.sh | bash which downloads and executes arbitrary shell scripts from the internet without integrity verification.
SKILL.md:60 为什么得出这个结论
2/4 个维度触发 通过
声明与实际能力
声明资源与推断能力基本一致。
阻止
隐藏执行与外联
提取到 1 个高危 IOC 或外联信号。
阻止
攻击链与高危发现
报告包含 0 步攻击链，另有 2 项高危或严重发现。
复核
依赖与供应链卫生
发现 1 项需要关注的依赖或供应链线索。
风险分是怎么被拉高的
curl|bash remote script execution +25
SKILL.md:60 contains curl -fsSL https://cli.oomol.com/install.sh | bash with no version pinning or integrity check
PowerShell equivalent remote execution +10
SKILL.md:63 contains irm https://cli.oomol.com/install.ps1 | iex pattern
Supply chain risk unmitigated +7
No pinned versions or checksums for downloaded installer scripts
最关键的证据
高危 供应链
Remote script execution via curl|bash
First-time setup includes curl -fsSL https://cli.oomol.com/install.sh | bash which downloads and executes arbitrary shell scripts from the internet without integrity verification.
SKILL.md:60 Replace with direct binary download: curl -fsSL https://cli.oomol.com/releases/oo-$(uname -s)-$(uname -m).tar.gz | tar xz && mv oo /usr/local/bin/ or provide SHA256 checksum verification.
高危 供应链
PowerShell remote script execution
Windows installation uses irm URL | iex pattern which downloads and executes PowerShell scripts from the internet.
SKILL.md:63 Provide signed installer or direct binary download with checksum verification.
低危 文档欺骗
Conditional trigger reduces risk
The remote script execution only triggers when 'oo: command not found' error occurs, reducing likelihood of accidental execution. skill-card.md discloses this risk.
SKILL.md:53 Document this is only for initial setup and confirm user intent before proceeding.
声明能力 vs 实际能力
命令执行 通过
声明 WRITE
→ 推断 WRITE
SKILL.md:14-15 Bash(oo *) declaration allows all oo commands including connector operations 可疑产物与外联
严重 危险命令
curl -fsSL https://cli.oomol.com/install.sh | bash SKILL.md:60
中危 外部 URL
https://static.oomol.com/logo/third-party/docsumo.svg SKILL.md:10
中危 外部 URL
https://cli.oomol.com/install-guide.md SKILL.md:57
中危 外部 URL
https://cli.oomol.com/install.sh SKILL.md:60
中危 外部 URL
https://cli.oomol.com/install.ps1 SKILL.md:64
中危 外部 URL
https://console.oomol.com/app-connections?provider=docsumo SKILL.md:76
中危 外部 URL
https://console.oomol.com/billing/token-recharge SKILL.md:79
中危 外部 URL
https://www.docsumo.com SKILL.md:83
中危 外部 URL
https://clawhub.ai/user/oomol skill-card.md:9
中危 外部 URL
https://clawhub.ai/oomol/skills/oo-docsumo skill-card.md:42
依赖与供应链
| 包名 | 版本 | 来源 | 漏洞 | 备注 |
|---|---|---|---|---|
| oo-cli | * | https://cli.oomol.com/install.sh | 否 | No version pinning; remote script execution with curl|bash |
文件构成
3 个文件 · 148 行
Markdown 2 个文件 · 143 行JSON 1 个文件 · 5 行
需关注文件 · 2
SKILL.md Remote script execution via curl|bash · PowerShell remote script execution · Conditional trigger reduces risk · curl -fsSL https://cli.oomol.com/install.sh | bash · https://static.oomol.com/logo/third-party/docsumo.svg · https://cli.oomol.com/install-guide.md · https://cli.oomol.com/install.sh · https://cli.oomol.com/install.ps1 · https://console.oomol.com/app-connections?provider=docsumo · https://console.oomol.com/billing/token-recharge · https://www.docsumo.com
skill-card.md https://clawhub.ai/user/oomol · https://clawhub.ai/oomol/skills/oo-docsumo
其他文件 · _meta.json
安全亮点
skill-card.md explicitly discloses remote installer risk with mitigations
All Docsumo operations use the oo CLI which is a legitimate, documented tool
Credential handling is delegated to oo CLI with server-side injection (no raw token exposure)
Write operations are tagged [write] requiring user confirmation
Destructive operations are tagged [destructive] requiring explicit approval
Actions are limited to documented connector operations, no arbitrary code execution