ClawHub
Back to skill

Security audit

B-Roll and Motion Graphics Composer

Security checks for vulnerabilities and agentic risk

Overview

The skill describes a coherent video-editing integration with Levea, with expected account credentials and content sharing.

Use media and prompts you are comfortable sending to Levea: supplied URLs let the service retrieve that content, and timeline state may also be submitted. Keep the API key in the documented tool configuration, and use requirePlanApproval when you want to review changes first. The separate plugin, MCP server, and hosted service were not included in this review.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Output HandlingUnvalidated Output Injection, Cross-Context Output, Unbounded Output
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (1)

The editing workflow lacks a privacy warning about sending user content to the third-party Levea service.

Medium
Category
Output Handling
Confidence
90% confidence
Finding

The skill instructs the agent to invoke the editing tool with user prompts and potentially source-media URLs or existing timeline state. Although the setup identifies Levea as the service provider, it does not warn that these inputs are shared with that third party or that supplied media URLs allow the service to access the content.

Content

No source excerpt is available for this finding.