outlook-skill-clawhub

clawhub:outlook-skill-clawhub

View source

100/100

First Seen

Feb 18, 2026

Last Scanned

Feb 22, 2026

Findings

Score

100/100

LOW 29

Findings (29)

LOW

Shell script file execution CMDEXEC_013

command-execution L81

Detects execution of shell script files via bash/sh command or direct invocation

bash
./scripts/outlook-token.sh

FIX

Replace direct shell script execution with a language-native implementation or a sandboxed executor. If shell scripts must run, restrict them to a vetted allowlist with integrity checks.

FP?

Likely FP if the match references running a script that is part of the skill's own repository (e.g., ./setup.sh) with clear, auditable contents.

LOW

Shell script file execution CMDEXEC_013

command-execution L82

Detects execution of shell script files via bash/sh command or direct invocation

./scripts/outlook-token.sh

FIX

Replace direct shell script execution with a language-native implementation or a sandboxed executor. If shell scripts must run, restrict them to a vetted allowlist with integrity checks.

FP?

Likely FP if the match references running a script that is part of the skill's own repository (e.g., ./setup.sh) with clear, auditable contents.

LOW

Shell script file execution CMDEXEC_013

command-execution L83

Detects execution of shell script files via bash/sh command or direct invocation

./scripts/outlook-token.sh

FIX

Replace direct shell script execution with a language-native implementation or a sandboxed executor. If shell scripts must run, restrict them to a vetted allowlist with integrity checks.

FP?

Likely FP if the match references running a script that is part of the skill's own repository (e.g., ./setup.sh) with clear, auditable contents.

LOW

Shell script file execution CMDEXEC_013

command-execution L84

Detects execution of shell script files via bash/sh command or direct invocation

./scripts/outlook-token.sh

FIX

Replace direct shell script execution with a language-native implementation or a sandboxed executor. If shell scripts must run, restrict them to a vetted allowlist with integrity checks.

FP?

Likely FP if the match references running a script that is part of the skill's own repository (e.g., ./setup.sh) with clear, auditable contents.

LOW

Shell script file execution CMDEXEC_013

command-execution L88

Detects execution of shell script files via bash/sh command or direct invocation

bash
./scripts/outlook-mail.sh

FIX

Replace direct shell script execution with a language-native implementation or a sandboxed executor. If shell scripts must run, restrict them to a vetted allowlist with integrity checks.

FP?

Likely FP if the match references running a script that is part of the skill's own repository (e.g., ./setup.sh) with clear, auditable contents.

LOW

Shell script file execution CMDEXEC_013

command-execution L89

Detects execution of shell script files via bash/sh command or direct invocation

./scripts/outlook-mail.sh

FIX

Replace direct shell script execution with a language-native implementation or a sandboxed executor. If shell scripts must run, restrict them to a vetted allowlist with integrity checks.

FP?

Likely FP if the match references running a script that is part of the skill's own repository (e.g., ./setup.sh) with clear, auditable contents.

LOW

Shell script file execution CMDEXEC_013

command-execution L90

Detects execution of shell script files via bash/sh command or direct invocation

./scripts/outlook-mail.sh

FIX

Replace direct shell script execution with a language-native implementation or a sandboxed executor. If shell scripts must run, restrict them to a vetted allowlist with integrity checks.

FP?

Likely FP if the match references running a script that is part of the skill's own repository (e.g., ./setup.sh) with clear, auditable contents.

LOW

Shell script file execution CMDEXEC_013

command-execution L91

Detects execution of shell script files via bash/sh command or direct invocation

./scripts/outlook-mail.sh

FIX

Replace direct shell script execution with a language-native implementation or a sandboxed executor. If shell scripts must run, restrict them to a vetted allowlist with integrity checks.

FP?

Likely FP if the match references running a script that is part of the skill's own repository (e.g., ./setup.sh) with clear, auditable contents.

LOW

Shell script file execution CMDEXEC_013

command-execution L92

Detects execution of shell script files via bash/sh command or direct invocation

./scripts/outlook-mail.sh

FIX

Replace direct shell script execution with a language-native implementation or a sandboxed executor. If shell scripts must run, restrict them to a vetted allowlist with integrity checks.

FP?

Likely FP if the match references running a script that is part of the skill's own repository (e.g., ./setup.sh) with clear, auditable contents.

LOW

Shell script file execution CMDEXEC_013

command-execution L93

Detects execution of shell script files via bash/sh command or direct invocation

./scripts/outlook-mail.sh

FIX

Replace direct shell script execution with a language-native implementation or a sandboxed executor. If shell scripts must run, restrict them to a vetted allowlist with integrity checks.

FP?

Likely FP if the match references running a script that is part of the skill's own repository (e.g., ./setup.sh) with clear, auditable contents.

LOW

Shell script file execution CMDEXEC_013

command-execution L97

Detects execution of shell script files via bash/sh command or direct invocation

bash
./scripts/outlook-mail.sh

FIX

Replace direct shell script execution with a language-native implementation or a sandboxed executor. If shell scripts must run, restrict them to a vetted allowlist with integrity checks.

FP?

Likely FP if the match references running a script that is part of the skill's own repository (e.g., ./setup.sh) with clear, auditable contents.

LOW

Shell script file execution CMDEXEC_013

command-execution L98

Detects execution of shell script files via bash/sh command or direct invocation

./scripts/outlook-mail.sh

FIX

Replace direct shell script execution with a language-native implementation or a sandboxed executor. If shell scripts must run, restrict them to a vetted allowlist with integrity checks.

FP?

Likely FP if the match references running a script that is part of the skill's own repository (e.g., ./setup.sh) with clear, auditable contents.

LOW

Shell script file execution CMDEXEC_013

command-execution L99

Detects execution of shell script files via bash/sh command or direct invocation

./scripts/outlook-mail.sh

FIX

Replace direct shell script execution with a language-native implementation or a sandboxed executor. If shell scripts must run, restrict them to a vetted allowlist with integrity checks.

FP?

Likely FP if the match references running a script that is part of the skill's own repository (e.g., ./setup.sh) with clear, auditable contents.

LOW

Shell script file execution CMDEXEC_013

command-execution L100

Detects execution of shell script files via bash/sh command or direct invocation

./scripts/outlook-mail.sh

FIX

Replace direct shell script execution with a language-native implementation or a sandboxed executor. If shell scripts must run, restrict them to a vetted allowlist with integrity checks.

FP?

Likely FP if the match references running a script that is part of the skill's own repository (e.g., ./setup.sh) with clear, auditable contents.

LOW

Shell script file execution CMDEXEC_013

command-execution L101

Detects execution of shell script files via bash/sh command or direct invocation

./scripts/outlook-mail.sh

FIX

Replace direct shell script execution with a language-native implementation or a sandboxed executor. If shell scripts must run, restrict them to a vetted allowlist with integrity checks.

FP?

Likely FP if the match references running a script that is part of the skill's own repository (e.g., ./setup.sh) with clear, auditable contents.

LOW

Shell script file execution CMDEXEC_013

command-execution L102

Detects execution of shell script files via bash/sh command or direct invocation

./scripts/outlook-mail.sh

FIX

Replace direct shell script execution with a language-native implementation or a sandboxed executor. If shell scripts must run, restrict them to a vetted allowlist with integrity checks.

FP?

Likely FP if the match references running a script that is part of the skill's own repository (e.g., ./setup.sh) with clear, auditable contents.

LOW

Shell script file execution CMDEXEC_013

command-execution L103

Detects execution of shell script files via bash/sh command or direct invocation

./scripts/outlook-mail.sh

FIX

Replace direct shell script execution with a language-native implementation or a sandboxed executor. If shell scripts must run, restrict them to a vetted allowlist with integrity checks.

FP?

Likely FP if the match references running a script that is part of the skill's own repository (e.g., ./setup.sh) with clear, auditable contents.

LOW

Shell script file execution CMDEXEC_013

command-execution L107

Detects execution of shell script files via bash/sh command or direct invocation

bash
./scripts/outlook-mail.sh

FIX

Replace direct shell script execution with a language-native implementation or a sandboxed executor. If shell scripts must run, restrict them to a vetted allowlist with integrity checks.

FP?

Likely FP if the match references running a script that is part of the skill's own repository (e.g., ./setup.sh) with clear, auditable contents.

LOW

Shell script file execution CMDEXEC_013

command-execution L108

Detects execution of shell script files via bash/sh command or direct invocation

./scripts/outlook-mail.sh

FIX

Replace direct shell script execution with a language-native implementation or a sandboxed executor. If shell scripts must run, restrict them to a vetted allowlist with integrity checks.

FP?

Likely FP if the match references running a script that is part of the skill's own repository (e.g., ./setup.sh) with clear, auditable contents.

LOW

Shell script file execution CMDEXEC_013

command-execution L109

Detects execution of shell script files via bash/sh command or direct invocation

./scripts/outlook-mail.sh

FIX

Replace direct shell script execution with a language-native implementation or a sandboxed executor. If shell scripts must run, restrict them to a vetted allowlist with integrity checks.

FP?

Likely FP if the match references running a script that is part of the skill's own repository (e.g., ./setup.sh) with clear, auditable contents.

LOW

Shell script file execution CMDEXEC_013

command-execution L115

Detects execution of shell script files via bash/sh command or direct invocation

bash
./scripts/outlook-calendar.sh

FIX

Replace direct shell script execution with a language-native implementation or a sandboxed executor. If shell scripts must run, restrict them to a vetted allowlist with integrity checks.

FP?

Likely FP if the match references running a script that is part of the skill's own repository (e.g., ./setup.sh) with clear, auditable contents.

LOW

Shell script file execution CMDEXEC_013

command-execution L116

Detects execution of shell script files via bash/sh command or direct invocation

./scripts/outlook-calendar.sh

FIX

Replace direct shell script execution with a language-native implementation or a sandboxed executor. If shell scripts must run, restrict them to a vetted allowlist with integrity checks.

FP?

Likely FP if the match references running a script that is part of the skill's own repository (e.g., ./setup.sh) with clear, auditable contents.

LOW

Shell script file execution CMDEXEC_013

command-execution L117

Detects execution of shell script files via bash/sh command or direct invocation

./scripts/outlook-calendar.sh

FIX

Replace direct shell script execution with a language-native implementation or a sandboxed executor. If shell scripts must run, restrict them to a vetted allowlist with integrity checks.

FP?

Likely FP if the match references running a script that is part of the skill's own repository (e.g., ./setup.sh) with clear, auditable contents.

LOW

Shell script file execution CMDEXEC_013

command-execution L118

Detects execution of shell script files via bash/sh command or direct invocation

./scripts/outlook-calendar.sh

FIX

Replace direct shell script execution with a language-native implementation or a sandboxed executor. If shell scripts must run, restrict them to a vetted allowlist with integrity checks.

FP?

Likely FP if the match references running a script that is part of the skill's own repository (e.g., ./setup.sh) with clear, auditable contents.

LOW

Shell script file execution CMDEXEC_013

command-execution L119

Detects execution of shell script files via bash/sh command or direct invocation

./scripts/outlook-calendar.sh

FIX

Replace direct shell script execution with a language-native implementation or a sandboxed executor. If shell scripts must run, restrict them to a vetted allowlist with integrity checks.

FP?

Likely FP if the match references running a script that is part of the skill's own repository (e.g., ./setup.sh) with clear, auditable contents.

LOW

Shell script file execution CMDEXEC_013

command-execution L120

Detects execution of shell script files via bash/sh command or direct invocation

./scripts/outlook-calendar.sh

FIX

Replace direct shell script execution with a language-native implementation or a sandboxed executor. If shell scripts must run, restrict them to a vetted allowlist with integrity checks.

FP?

Likely FP if the match references running a script that is part of the skill's own repository (e.g., ./setup.sh) with clear, auditable contents.

LOW

Shell script file execution CMDEXEC_013

command-execution L124

Detects execution of shell script files via bash/sh command or direct invocation

bash
./scripts/outlook-calendar.sh

FIX

Replace direct shell script execution with a language-native implementation or a sandboxed executor. If shell scripts must run, restrict them to a vetted allowlist with integrity checks.

FP?

Likely FP if the match references running a script that is part of the skill's own repository (e.g., ./setup.sh) with clear, auditable contents.

LOW

Shell script file execution CMDEXEC_013

command-execution L125

Detects execution of shell script files via bash/sh command or direct invocation

./scripts/outlook-calendar.sh

FIX

Replace direct shell script execution with a language-native implementation or a sandboxed executor. If shell scripts must run, restrict them to a vetted allowlist with integrity checks.

FP?

Likely FP if the match references running a script that is part of the skill's own repository (e.g., ./setup.sh) with clear, auditable contents.

LOW

Shell script file execution CMDEXEC_013

command-execution L126

Detects execution of shell script files via bash/sh command or direct invocation

./scripts/outlook-calendar.sh

FIX

Replace direct shell script execution with a language-native implementation or a sandboxed executor. If shell scripts must run, restrict them to a vetted allowlist with integrity checks.

FP?

Likely FP if the match references running a script that is part of the skill's own repository (e.g., ./setup.sh) with clear, auditable contents.