ocas-weave
Weave creates a private social graph for managing relationships and preferences, enhancing networking and connection discovery.
Install this skill
or
85/100
Security score
The ocas-weave skill was audited on Sep 25, 2026 and we found 1 security issue across 1 threat category, including 1 high-severity. Review the findings below before installing.
Categories Tested
Security Issues
high line 249
Curl to non-GitHub URL
SourceSKILL.md
| 247 | - **Schema**: `facts` has NO `person_id` — linkage is via `edges` table. `persons` has id/name/email/phone/location_city/location_country/occupation/org/google_resource_name/clay_id/source_type/source_ref/confidence/record_time/valid_from/valid_until. |
| 248 | - **Google OAuth failure**: `google_sync.py` exits code 2 with clean ABORT on revoked token. Log and continue with MCP tools. No programmatic workaround. |
| 249 | - **Page fetching**: `web_extract` fails with SearXNG backend — use `curl -s "https://r.jina.ai/URL"`. Jina Reader blocks LinkedIn. |
| 250 | - **Skip** contacts where both `occupation` AND `org` are null AND confidence < 0.5. |
| 251 |
Scanned on Sep 25, 2026
View Security DashboardRating
5.01
Rate this skill
Categorysales
UpdatedSeptember 26, 2026
hermesfrontenddocxgitapidatabasetestingbackendcustomer-success-managersocial-media-managerinfluencer-marketergrowth-marketermarketing-analystsalesmarketing
indigokarasu/weave