ClawHub
Back to skill

Security audit

Poyo Elevenlabs V3 Tts

Security checks for vulnerabilities and agentic risk

Overview

This skill is a disclosed PoYo text-to-speech API helper, and its network submission behavior matches its stated purpose.

Install only if you intend to send TTS job payloads to PoYo. Review payload JSON before submission because it may contain private text or callback URLs, keep POYO_API_KEY server-side, and avoid logging generated task IDs, audio URLs, or customer content unless your policy allows it.

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (3)

Missing User Warnings

Medium
Confidence
90% confidence
Finding
The script unconditionally uploads the user-supplied JSON payload to an external API endpoint but provides no warning, confirmation, or disclosure to the caller about data leaving the local environment. This is dangerous because payloads may contain sensitive prompts, personal data, secrets, or proprietary content, and users may invoke the helper assuming it is a local submission step rather than an external transmission.

External Transmission

Medium
Category
Data Exfiltration
Content
payload_file="$1"

curl --fail-with-body --request POST \
  --url "https://api.poyo.ai/api/generate/submit" \
  --header "Authorization: Bearer ${POYO_API_KEY}" \
  --header "Content-Type: application/json" \
Confidence
86% confidence
Finding
This curl invocation sends the entire contents of an attacker- or user-controlled JSON file to a remote service along with an authorization bearer token. In a skill context, hidden or poorly disclosed network exfiltration is risky because sensitive local data can be transmitted off-host to a third party without adequate awareness or review.

External Transmission

Medium
Category
Data Exfiltration
Content
payload_file="$1"

curl --fail-with-body --request POST \
  --url "https://api.poyo.ai/api/generate/submit" \
  --header "Authorization: Bearer ${POYO_API_KEY}" \
  --header "Content-Type: application/json" \
  --data @"${payload_file}"
Confidence
84% confidence
Finding
The hardcoded remote endpoint confirms that the script is designed to communicate with an external third-party service. While external API use can be legitimate, in this context the absence of disclosure and the direct upload of arbitrary JSON make the transmission potentially privacy- and confidentiality-impacting.

Static analysis

No suspicious patterns detected.