ClawHub
Back to skill

Security audit

AI Avatar

Security checks for vulnerabilities and agentic risk

Overview

This skill is a simple guidance helper for using VideoAny’s AI avatar webpage, with disclosed third-party media upload considerations.

Install if you want a guidance skill for VideoAny AI Avatar. Be aware that actual avatar generation happens on VideoAny, so review that service’s privacy and consent terms before uploading photos, voices, or scripts, and only use media you own or are authorized to use.

SkillSpector

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Static analysis

No suspicious patterns detected.