ClawHub
Back to skill

Security audit

Alibaba Cloud AI Audio ASR

Security checks across malware telemetry and agentic risk

Overview

This is a straightforward Alibaba Cloud transcription skill, but users should know selected audio is sent to DashScope and transcripts are saved locally.

Install only if you are comfortable sending the recordings or audio URLs you choose to Alibaba Cloud DashScope for transcription. Use a dedicated DashScope API key, confirm which Alibaba profile is active, and manage generated transcript and raw-response files according to the sensitivity of the audio.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (3)

Lp3

Medium
Category
MCP Least Privilege
Confidence
89% confidence
Finding
The skill clearly requires environment access, file read/write, and outbound network access, but it does not declare those permissions anywhere in the skill metadata. That creates a transparency and policy-enforcement gap: an agent or reviewer cannot accurately reason about the skill's operational and data-exposure capabilities before use.

Missing User Warnings

Medium
Confidence
77% confidence
Finding
The script uploads either local audio content or a user-supplied URL reference to a third-party ASR service, but provides no explicit runtime disclosure that transcription involves network transmission and possible sensitive-data exposure. In a transcription skill, this behavior is expected, but lack of notice can still create privacy and compliance risk when users process confidential recordings.

External Transmission

Medium
Category
Data Exfiltration
Content
Sync transcription (OpenAI-compatible protocol):

```bash
curl -sS --location 'https://dashscope.aliyuncs.com/compatible-mode/v1/chat/completions' \
  --header "Authorization: Bearer $DASHSCOPE_API_KEY" \
  --header 'Content-Type: application/json' \
  --data '{
Confidence
81% confidence
Finding
curl -sS --location 'https://dashscope.aliyuncs.com/compatible-mode/v1/chat/completions' \ --header "Authorization: Bearer $DASHSCOPE_API_KEY" \ --header 'Content-Type: application/json' \ --dat

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.