ClawHub
Back to skill

Security audit

speech-recognition

Security checks across malware telemetry and agentic risk

Overview

This speech-to-text skill is coherent and disclosed, but it sends chosen audio files to SiliconFlow for transcription.

Install this only if you want SiliconFlow-based transcription. Use a dedicated or revocable API key, and only transcribe audio you are comfortable sending to SiliconFlow, especially voice messages or meeting recordings.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (3)

Vague Triggers

Medium
Confidence
82% confidence
Finding
The description says the skill triggers when users send voice messages, audio files, or when they 'need to transcribe audio', which is broad enough to overlap with many common user requests. Overly loose activation can cause the agent to invoke this skill in unintended contexts, potentially routing user content to an external transcription API without sufficiently clear user intent.

External Transmission

Medium
Category
Data Exfiltration
Content
with open("/path/to/audio.mp3", "rb") as f:
    audio_data = f.read()

response = requests.post(
    "https://api.siliconflow.cn/v1/audio/transcriptions",
    headers={"Authorization": f"Bearer {api_key}"},
    files={"file": ("audio.mp3", audio_data, "audio/mpeg")},
Confidence
97% confidence
Finding
该技能会将用户提供的音频内容通过 HTTPS 发送到第三方语音识别服务，属于真实的数据外传行为。即使这是技能的正常功能，音频中可能包含敏感个人信息、口令、会议内容或生物特征，因此在缺乏显式同意、最小化上传和数据处理说明时存在隐私与合规风险。

External Transmission

Medium
Category
Data Exfiltration
Content
with open('/tmp/audio.mp3', 'rb') as f:
    audio_data = f.read()

response = requests.post(
    'https://api.siliconflow.cn/v1/audio/transcriptions',
    headers={'Authorization': f'Bearer {api_key}'},
    files={'file': ('audio.mp3', audio_data, 'audio/mpeg')},
Confidence
97% confidence
Finding
此处再次展示将转换后的音频文件上传到第三方 API 的行为，属于实际外部传输。技能上下文是语音转写，因此外传是功能所必需，但也因此更应关注误上传本地临时文件、含敏感语音内容文件以及未经确认的数据处理。

VirusTotal

66/66 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.