ClawHub
Back to skill

Security audit

Alibaba Cloud AI Audio LiveTranslate

Security checks for vulnerabilities and agentic risk

Overview

This skill is a straightforward Alibaba Cloud LiveTranslate helper that writes scoped output files and does not show hidden execution, persistence, or credential access.

Install only if you intend to use Alibaba Cloud LiveTranslate. Review any saved output before sharing it, because translation payloads and summaries may contain private speech or business content; keep those files in a controlled location and delete them when no longer needed.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (3)

Lp3

Medium
Category
MCP Least Privilege
Confidence
81% confidence
Finding
The skill instructs writing files into an output directory during validation and normal operation, but it does not declare any explicit tool scope such as permissions or allowed-tools. In an agent environment, undeclared file-write capability weakens least-privilege controls and can let the skill perform filesystem actions users or orchestrators did not clearly authorize.

Missing User Warnings

Medium
Confidence
92% confidence
Finding
The skill tells users to save translation session payloads and response summaries, which can include sensitive speech transcripts, meeting content, personal data, or business-confidential discussions. Without any warning, minimization guidance, redaction, or retention limits, operators may persist highly sensitive content to disk unintentionally, increasing privacy, compliance, and data exposure risk.

Natural-Language Policy Violations

Low
Confidence
88% confidence
Finding
The script defaults to translating from Chinese to English via hard-coded language arguments. This imposes a specific language/locale behavior unless the user explicitly overrides it, and there is no accompanying indication that the default is optional or user-selected.

Static analysis

No suspicious patterns detected.