Security audit
Security checks for vulnerabilities and agentic risk
This skill coherently transcribes user-chosen audio through OATDA, with expected API-key use and external upload disclosed in its commands.
Install only if you are comfortable sending selected audio files and their contents to OATDA for transcription. Avoid using it on highly sensitive recordings unless your OATDA account, data-handling expectations, and consent requirements are appropriate.
Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.
"openclaw":
{
"emoji": "📝",
"requires": { "bins": ["curl", "jq"], "env": ["OATDA_API_KEY"], "config": ["~/.oatda/credentials.json"] },
"primaryEnv": "OATDA_API_KEY",
},
}
Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.
"openclaw":
{
"emoji": "📝",
"requires": { "bins": ["curl", "jq"], "env": ["OATDA_API_KEY"], "config": ["~/.oatda/credentials.json"] },
"primaryEnv": "OATDA_API_KEY",
},
}
Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.
"openclaw":
{
"emoji": "📝",
"requires": { "bins": ["curl", "jq"], "env": ["OATDA_API_KEY"], "config": ["~/.oatda/credentials.json"] },
"primaryEnv": "OATDA_API_KEY",
},
}
Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.
"openclaw":
{
"emoji": "📝",
"requires": { "bins": ["curl", "jq"], "env": ["OATDA_API_KEY"], "config": ["~/.oatda/credentials.json"] },
"primaryEnv": "OATDA_API_KEY",
},
}
Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.
"openclaw":
{
"emoji": "📝",
"requires": { "bins": ["curl", "jq"], "env": ["OATDA_API_KEY"], "config": ["~/.oatda/credentials.json"] },
"primaryEnv": "OATDA_API_KEY",
},
}
Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.
"openclaw":
{
"emoji": "📝",
"requires": { "bins": ["curl", "jq"], "env": ["OATDA_API_KEY"], "config": ["~/.oatda/credentials.json"] },
"primaryEnv": "OATDA_API_KEY",
},
}
The trigger language is broad enough to match many generic user requests about speech-to-text, meetings, podcasts, voice notes, and subtitles, which can cause this skill to activate in situations where users may not expect remote third-party processing. In this skill’s context, overbroad activation increases the chance that local audio content is sent externally without sufficiently specific user intent.
The skill describes audio transcription behavior but does not clearly warn that local audio files and their contents will be uploaded to OATDA, a third-party remote service. Because audio often contains sensitive conversations, this omission can lead to unintentional disclosure of private or regulated information.
This code explicitly base64-encodes a local audio file and transmits it to an external API endpoint, creating a clear data exfiltration path from the local environment to a remote service. While this is the intended function of a transcription skill, it is still security-relevant because the uploaded audio may contain secrets, PII, confidential business discussions, or regulated data.
AUDIO_DATA_URL="data:audio/mpeg;base64,$(base64 -w 0 audio.mp3)"
export OATDA_API_KEY="${OATDA_API_KEY:-$(cat ~/.oatda/credentials.json 2>/dev/null | jq -r '.profiles[.defaultProfile].apiKey' 2>/dev/null)}" && \
curl -s -X POST "https://oatda.com/api/v1/llm/transcriptions" \
-H "Content-Type: application/json" \
-H "Authorization: Bearer $OATDA_API_KEY" \
-d "$(jq -n \
No suspicious patterns detected.