ClawHub
Back to skill

Security audit

Elevenlabs Twilio Memory Bridge

Security checks across malware telemetry and agentic risk

Overview

This is a disclosed voice-agent webhook that stores caller memory for personalization, with privacy and dependency hardening items users should handle before production use.

Install only if you are prepared to operate a public webhook that handles caller-linked personal data. Use strong webhook and admin secrets, enable DATA_ENCRYPTION_KEY for production, restrict CORS, use scoped credentials, upgrade the flagged dependency when available, and document caller notice, retention, and deletion practices.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (3)

Lp3

Medium
Category
MCP Least Privilege
Confidence
90% confidence
Finding
The skill metadata declares OpenClaw runtime requirements and clearly describes capabilities to read/write files, access environment variables, make network requests, and invoke shell-based setup commands, but it does not declare an explicit permissions model covering those capabilities. This creates a transparency and review gap: operators may install the skill without understanding its effective access to secrets, persistent data, and external services, which increases the risk of over-privileged deployment or unsafe trust assumptions.

Missing User Warnings

Medium
Confidence
93% confidence
Finding
The README explicitly states that caller memories and notes may be stored as plain JSON when `DATA_ENCRYPTION_KEY` is not configured, and this project handles sensitive caller data such as preferences and health-related facts. Even though this is framed as optional encryption, the setup flow does not strongly warn operators that deploying without encryption at rest exposes private data to local compromise, backups, misconfigurations, or accidental disclosure.

Known Vulnerable Dependency: python-dotenv==1.2.0 — 1 advisory(ies): CVE-2026-28684 (python-dotenv: Symlink following in set_key allows arbitrary file overwrite via )

Low
Category
Supply Chain
Confidence
89% confidence
Finding
python-dotenv==1.2.0

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.