ClawHub
Back to skill

Security audit

DaDaScribe advanced speech-to-text transcription & translation

Security checks for vulnerabilities and agentic risk

Overview

The skill is a straightforward DaDaScribe transcription helper whose external API use is disclosed and aligned with its purpose, though users should treat uploads and optional GitHub package installation carefully.

Install only if you are comfortable sending audio, video, links, speaker names, and language options to DaDaScribe for processing. Avoid using it for confidential recordings unless DaDaScribe's retention and privacy terms meet your needs, keep the API key in an environment variable, and prefer pinned or verified package installation over the optional GitHub pip command.

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • YARA SignaturesMalware Match, Webshell Match, Cryptominer Match
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (3)

Missing User Warnings

Medium
Confidence
95% confidence
Finding
The skill description advertises transcription and translation capabilities but does not clearly warn that user-provided audio, video, and speech content will be uploaded to a third-party service for processing. This can mislead users about data handling and create privacy/compliance risk, especially for sensitive meetings, interviews, or local files.

External Transmission

Medium
Category
Data Exfiltration
Content
if diarization:
        payload["diarization"] = diarization

    r = requests.post(f"{BASE}/transcribe", json=payload, headers=HEADERS, timeout=30)
    r.raise_for_status()
    data = r.json()
    if data.get("status") != "ok":
Confidence
94% confidence
Finding
This code sends user-supplied transcription sources and language parameters to an external API endpoint, which is expected for the skill's purpose but still represents real third-party data exfiltration. The risk is contextual: if users are not clearly informed, sensitive media or links could be transmitted off-platform without meaningful consent.

YARA rule 'agent_skill_remote_bootstrap_execution': Remote script or code download followed by execution/bootstrap installation [agent_skills]

High
Category
YARA Match
Content
```bash
pip install -e .          # from this repo
# or
pip install git+https://github.com/PatzEdi/dadascribe-api-python.git
```

```python
Confidence
91% confidence
Finding
The skill recommends installing code directly from a remote Git repository via pip, which introduces software supply-chain risk. If the repository, dependency chain, or referenced revision is compromised, an agent or user could install and execute attacker-controlled code during setup.

Static analysis

Detected: suspicious.exposed_secret_literal

File appears to expose a hardcoded API secret or token.

Critical
Code
suspicious.exposed_secret_literal
Location
SKILL.md:23