ClawHub
Back to skill

Security audit

Video Translation

Security checks for vulnerabilities and agentic risk

Overview

This skill has a coherent video-dubbing purpose, but it relies on unpinned external code and API-backed voice cloning without enough consent, privacy, or dependency controls.

Review carefully before installing. Use only videos and voices you are authorized to process, assume subtitle text and voice/reference audio may leave your machine through the TTS backend, pin and inspect the external youtube-downloader and tts dependencies before running them, and avoid exposing broad environment variables or credentials to those scripts.

A.I.G

Vulnerability Patterns
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Findings (2)

T03 · Remote Payload Retrieval and Execution

Error
Location
SKILL.md:85
Finding

Execution of Unpinned Code Retrieved from Mutable External Repositories

Content
View full analysis
-o /tmp/video-translation ``` ```bash bash skills/tts/scripts/tts.sh render --srt translated.srt --voice-map voice_map.json --backend noiz --auto-emotion --ref-audio-track original_video.mp4 -o dubbed.wav ``` ### Technical Analysis The skill package does not contain the downloader or TTS implementation it executes. Instead, it directs users or agents to clone or copy executable Python and shell code from the current state of two external GitHub repositories. No immutable commit hash, signed release, checksum, integrity manifest, or required source review is specified. Consequently, the effective executable payload can change after this skill has been reviewed. A compromised upstream account, ...[truncated 1945 chars]
Remediation
View remediation

other

Error
Location
SKILL.md:45
Finding

External Processing of Source Voice Data Without Explicit Consent or Data-Minimization Controls

Content
View full analysis
" } } ``` Render the timeline-accurate audio: ```bash bash skills/tts/scripts/tts.sh render --srt translated.srt --voice-map voice_map.json --backend noiz --auto-emotion --ref-audio-track original_video.mp4 -o dubbed.wav ``` ``` The requirement at `SKILL.md:91` further establishes that the selected backend is API-backed: ```markdown - `NOIZ_API_KEY` configured: `bash skills/tts/scripts/tts.sh config --set-api-key YOUR_KEY` ``` ### Technical Analysis The normal workflow supplies `original_video.mp4` as the reference audio source to an API-backed TTS and voice-cloning process. A person's voice can be identifying, sensitive, and potentially biometric data. The video may also contain private speech, background conversations, or other audio unrelated to the requested translation. The documentation does not require explicit authorization from the speakers whose voices will be cloned. It also does not require user confirmation before external processing, identify the precise data transmitted, document provider retention and deletion behavior, or provide a privacy-preserving default that does not clone the s ...[truncated 1900 chars]
Remediation
View remediation

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (4)

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
93% confidence
Finding

The skill directs the agent to download third-party videos and send subtitle/text and potentially reference audio to external tooling/services without any user-facing warning about copyright, privacy, or third-party processing. In this context, users may unknowingly cause protected or sensitive content to be fetched and processed by downstream services, including voice-cloning/TTS infrastructure, which creates legal and privacy risk.

Content

No source excerpt is available for this finding.

Skill Enumeration

Medium
Category
Agent Snooping
Confidence
80% confidence
Finding

Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.

Content

Scanner excerpt · SKILL.md (reported line 86)May include surrounding context.

md
## Requirements

- **Dependencies (other skills)**  
  - **youtube-downloader** ([crazynomad/skills](https://github.com/crazynomad/skills)) — [SKILL.md](https://github.com/crazynomad/skills/blob/main/skills/youtube-downloader/SKILL.md)  
    Install: clone or copy the `skills/youtube-downloader` directory from [crazynomad/skills](https://github.com/crazynomad/skills) into your `skills/` folder so that `skills/youtube-downloader/scripts/download_video.py` is available.
  - **tts** ([NoizAI/skills](https://github.com/NoizAI/skills)) — [SKILL.md](https://github.com/NoizAI/skills/blob/main/skills/tts/SKILL.md)  
    If not already in this repo: clone or copy the `skills/tts` directory from [NoizAI/skills](https://github.com/NoizAI/skills) into your `skills/` folder. Ensure `skills/tts/scripts/tts.sh` and related scripts are present.

Skill Enumeration

Medium
Category
Agent Snooping
Confidence
80% confidence
Finding

Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.

Content

Scanner excerpt · SKILL.md (reported line 88)May include surrounding context.

md
- **Dependencies (other skills)**  
  - **youtube-downloader** ([crazynomad/skills](https://github.com/crazynomad/skills)) — [SKILL.md](https://github.com/crazynomad/skills/blob/main/skills/youtube-downloader/SKILL.md)  
    Install: clone or copy the `skills/youtube-downloader` directory from [crazynomad/skills](https://github.com/crazynomad/skills) into your `skills/` folder so that `skills/youtube-downloader/scripts/download_video.py` is available.
  - **tts** ([NoizAI/skills](https://github.com/NoizAI/skills)) — [SKILL.md](https://github.com/NoizAI/skills/blob/main/skills/tts/SKILL.md)  
    If not already in this repo: clone or copy the `skills/tts` directory from [NoizAI/skills](https://github.com/NoizAI/skills) into your `skills/` folder. Ensure `skills/tts/scripts/tts.sh` and related scripts are present.
- `NOIZ_API_KEY` configured: `bash skills/tts/scripts/tts.sh config --set-api-key YOUR_KEY`
- `ffmpeg` installed.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
62% confidence
Finding

One listed trigger is specifically 'dub this video to English', which privileges a specific target language in the natural-language interface. While the rest of the document supports arbitrary target languages, this line is a locale-specific instruction without any explicit opt-in framing.

Content

No source excerpt is available for this finding.