ClawHub
Back to skill

Security audit

Audio Transcription

Security checks across malware telemetry and agentic risk

Overview

This skill does what it claims: transcribes a chosen audio file, with a privacy caveat if it falls back to OpenAI’s API.

Install only if you are comfortable with a shell script processing audio files. For sensitive recordings, use local Whisper or whisper.cpp and avoid setting OPENAI_API_KEY for this run; if the API fallback is used, the selected audio can be sent to OpenAI and may incur API charges.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (3)

Lp3

Medium
Category
MCP Least Privilege
Confidence
90% confidence
Finding
The skill advertises and instructs use of shell commands and an executable script, but it does not declare corresponding permissions. This creates a transparency and policy gap: the agent may invoke local shell capabilities or installation commands without users/admins having clear permission visibility, increasing the risk of unexpected command execution in the host environment.

Missing User Warnings

Medium
Confidence
95% confidence
Finding
The documentation states the skill may fall back to the OpenAI API for transcription but does not clearly warn that user audio may be uploaded off-device. Audio files often contain sensitive personal or business information, so silent transmission to a third-party service can cause privacy, compliance, and data-handling violations.

Missing User Warnings

Medium
Confidence
95% confidence
Finding
The script falls back to sending the user's audio file to the OpenAI transcription API whenever OPENAI_API_KEY is set, but it does not provide an explicit warning, consent step, or clear indication that audio leaves the local machine. Because audio often contains sensitive personal or business information, silent remote transmission creates a meaningful privacy and compliance risk.

VirusTotal

66/66 vendors flagged this skill as clean.

View on VirusTotal