ClawHub
Back to skill

Security audit

iFLYTEK Song Recognition

Security checks across malware telemetry and agentic risk

Overview

This skill does what it advertises: it sends a user-chosen audio file to iFlytek for song recognition, with privacy caveats users should understand.

Install only if you are comfortable sending selected audio files to iFlytek's service and using iFlytek API credentials on this machine. Do not submit private speech, confidential recordings, or copyrighted audio unless you have the right approvals.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (3)

Lp3

Medium
Category
MCP Least Privilege
Confidence
93% confidence
Finding
The skill requires environment variables containing API credentials and clearly depends on a remote recognition API, but it does not declare corresponding permissions/capabilities in a way that gives users clear security visibility. This creates a transparency and consent problem: users may run a skill that accesses secrets and the network without explicit permission signaling, increasing the risk of unintended secret exposure or unreviewed outbound data transfer.

Missing User Warnings

Medium
Confidence
97% confidence
Finding
The documentation explains that network connectivity is required and references a third-party recognition API, but it does not clearly warn users that supplied audio content will be transmitted off-device to an external service. Audio may contain sensitive personal, environmental, or copyrighted content, so omission of this warning undermines informed consent and can cause privacy, compliance, or data-handling issues.

Missing User Warnings

Medium
Confidence
90% confidence
Finding
The skill base64-encodes the provided audio file and sends it to a remote vendor API for recognition, but there is no explicit user consent flow, privacy notice, or data-handling disclosure in the code path. Audio may contain personal or sensitive information, so silent transmission to a third party creates a privacy and compliance risk, especially in agent environments where users may assume local processing.

VirusTotal

62/62 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.