ClawHub
Back to skill

Security audit

Home Music

Security checks across malware telemetry and agentic risk

Overview

This skill transparently controls local Spotify and Airfoil speaker scenes, with only accidental-activation and install-scope cautions.

Before installing, review the speaker names, playlist URIs, volume levels, and the hardcoded spotify-applescript path. Use explicit commands like home-music party or home-music off, and consider using a user-local bin directory instead of the sudo /usr/local/bin symlink if you do not need global access.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (3)

Vague Triggers

Medium
Confidence
94% confidence
Finding
The trigger set includes broad, everyday phrases such as "party mode," "chill music," "house music," and especially "stop music," which can be invoked unintentionally by normal conversation or unrelated requests. Because this skill controls real-world audio playback and speaker routing across the house, accidental activation can disrupt the environment and override user expectations even without explicit intent.

Vague Triggers

Medium
Confidence
91% confidence
Finding
The usage examples encourage ambiguous natural-language requests like "Hey, start party mode" and "Stop the music" without constraining them to this specific skill. In an agent system, such examples train users and possibly routing logic toward vague commands that may collide with other skills or built-in controls, increasing the chance of unintended execution.

Shadow Command Trigger

Medium
Category
Trigger Abuse
Confidence
97% confidence
Finding
The trigger phrase "stop music" is dangerously close to a built-in stop command and can shadow or conflict with core agent behavior. If matched preferentially, a user attempting to stop the assistant or halt another process could instead activate this skill, causing incorrect execution and making emergency interruption semantics less reliable.

VirusTotal

66/66 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.