ClawHub
Back to skill

Security audit

对口型 Sync Lipsync 3

Security checks for vulnerabilities and agentic risk

Overview

This skill is a disclosed wrapper around a third-party lip-sync API, with documentation quality issues but no artifact-backed malicious behavior.

Before installing, understand that this uses a third-party npm CLI and cloud API: selected local video/audio files may be uploaded to dLazy, and login may save an API key locally. Because the included examples contain stale or inconsistent prompt/image references, prefer checking `dlazy sync-lipsync-3 -h` and using the documented `--video_url` and `--audio_url` flags.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (7)

Ae1

High
Category
analysis-evasion
Confidence
100% confidence
Finding

Referenced artifact was not completely inspected

Content

Scanner excerpt · SKILL.md (reported line 10)May include surrounding context.

md
[English](./SKILL.md) · [中文](./SKILL-cn.md)

Intent-Code Divergence

Medium
Category
Not specified by scanner
Confidence
96% confidence
Finding

The skill is documented throughout as taking a video and audio input to generate a new lip-synced video, but the sample output block shows an output object with type: "image", a .png URL, and image/png MIME type. This actively contradicts the stated behavior of producing a video result and could mislead an agent about what the command actually returns.

Content

No source excerpt is available for this finding.

Intent-Code Divergence

Medium
Category
Not specified by scanner
Confidence
98% confidence
Finding

The documented options for dlazy sync-lipsync-3 list --video_url, --audio_url, and sync-related flags, but the example invocation uses --prompt and the error table says --prompt is required. This is a direct contradiction between the file's own usage documentation and the command interface it describes.

Content

No source excerpt is available for this finding.

Whitespace Padding

Medium
Category
Prompt Injection
Confidence
70% confidence
Finding

Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.

Content

Scanner excerpt · SKILL-cn.md (reported line 123)May include surrounding context.

md
## 错误处理

| Code | 错误类型                         | 示例信息                                                                                                                 |
| ---- | -------------------------------- | ------------------------------------------------------------------------------------------------------------------------ |
| 401  | 未授权 (API Key缺失或无效)       | `ok: false, code: "unauthorized", message: "API key is missing or invalid"`                                                              |
| 501  | 缺少必填参数                     | `error: required option '--prompt <prompt>' not specified`                                                               |

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
91% confidence
Finding

L132-L134 的“智能体关键指令”要求代理在特定错误场景下必须按固定中文措辞引导用户充值或获取 API Key，但文件未说明仅适用于中文用户，也未提供语言/locale 选择。按规则，这属于未经用户选择即施加语言/locale 约束的自然语言策略问题。

Content

No source excerpt is available for this finding.

Intent-Code Divergence

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

The manifest and overview describe a tool that takes video and audio inputs and produces a new lip-synced video, but the documented output example shows an image/png result and the usage example invokes an unrelated --prompt flag instead of video/audio arguments. This is not merely incomplete documentation; it actively conflicts with the declared purpose and interface of the skill.

Content

No source excerpt is available for this finding.

Whitespace Padding

Medium
Category
Prompt Injection
Confidence
70% confidence
Finding

Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.

Content

Scanner excerpt · SKILL.md (reported line 123)May include surrounding context.

md
## Error Handling

| Code | Error Type                         | Example Message                                                                                                          |
| ---- | ---------------------------------- | ------------------------------------------------------------------------------------------------------------------------ |
| 401  | Unauthorized (No API Key)          | `ok: false, code: "unauthorized", message: "API key is missing or invalid"`                                                              |
| 501  | Missing required parameter         | `error: required option '--prompt <prompt>' not specified`                                                              |

Static analysis

No suspicious patterns detected.