Security audit

AV Skill

Security checks for vulnerabilities and agentic risk

Overview

This audio/video skill is coherent with its stated purpose and shows no hidden or destructive behavior, but its dependency and privacy disclosures are thin.

Install in a virtual environment, consider pinning and auditing dependencies before use, and avoid sensitive media, private URLs, or confidential TTS text unless you understand which operations are local and which may contact external services.

SkillSpector

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (9)

Missing User Warnings

Medium

Confidence: 90% confidence
Finding: The README explicitly states that the skill handles URLs and requires internet connectivity for some features, but it does not warn users that media files, text, or metadata may be transmitted to remote services. In a multimedia-processing skill, this can expose sensitive local content or user prompts to third parties, especially for URL fetching and cloud-backed TTS features.

Unpinned Dependencies

Low

Category: Supply Chain
Content: # Audio and video processing libraries pydub moviepy opencv-python
Confidence: 96% confidence
Finding: The dependency pydub is unpinned, so builds may pull different versions over time, including versions with newly introduced bugs or supply-chain issues. In a skill that processes media, dependency drift reduces reproducibility and can unexpectedly introduce exploitable parsing behavior through transitive updates.

Unpinned Dependencies

Low

Category: Supply Chain
Content: # Audio and video processing libraries pydub moviepy opencv-python # Text-to-speech
Confidence: 96% confidence
Finding: The dependency moviepy is unpinned, allowing uncontrolled upgrades or dependency resolution changes during installation. Because this skill appears to process audio/video content, unexpected library changes can alter security posture and expose parsing or codec-related weaknesses.

Unpinned Dependencies

Low

Category: Supply Chain
Content: # Audio and video processing libraries pydub moviepy opencv-python # Text-to-speech gTTS
Confidence: 98% confidence
Finding: The dependency opencv-python is unpinned, which is more dangerous here because OpenCV has a long history of memory-safety issues in image/video parsing. An unpinned install may resolve to an unsafe or incompatible version, increasing risk in a media-processing skill.

Unpinned Dependencies

Low

Category: Supply Chain
Content: opencv-python # Text-to-speech gTTS # General utilities requests
Confidence: 94% confidence
Finding: The dependency gTTS is unpinned, so the installed version may vary between environments and over time. While not inherently critical from this file alone, unpinned network-capable libraries can introduce unexpected behavior, breakage, or security regressions.

Unpinned Dependencies

Low

Category: Supply Chain
Content: gTTS # General utilities requests Pillow
Confidence: 97% confidence
Finding: The dependency requests is unpinned, which is risky because network libraries frequently receive security fixes for TLS, redirect, credential-handling, and proxy-related issues. In a skill likely to fetch remote resources or services, version drift can directly affect confidentiality and transport security.

Known Vulnerable Dependency: opencv-python — 10 advisory(ies): CVE-2017-12864 (Integer Overflow or Wraparound in OpenCV); CVE-2017-12598 (Out-of-bounds Read in OpenCV ); CVE-2019-14493 (NULL Pointer Dereference in OpenCV.) +7 more

High

Category: Supply Chain
Confidence: 86% confidence
Finding: The requirements file includes opencv-python without a version pin, and the analyzer reports multiple known OpenCV advisories. In a skill that processes audio/video/images, this is especially concerning because malformed media inputs can exercise vulnerable parsing code and lead to crashes, denial of service, or potentially code execution depending on the specific flaw and installed version.

Known Vulnerable Dependency: requests — 10 advisory(ies): CVE-2014-1830 (Exposure of Sensitive Information to an Unauthorized Actor in Requests); CVE-2024-47081 (Requests vulnerable to .netrc credentials leak via malicious URLs); CVE-2024-35195 (Requests `Session` object does not verify requests after making first request wi) +7 more

High

Category: Supply Chain
Confidence: 84% confidence
Finding: The requirements file includes requests, and the analyzer associates it with multiple known advisories involving credential leakage and request verification issues. If this skill performs outbound HTTP requests, a vulnerable version could expose secrets, weaken TLS/request validation, or mishandle attacker-controlled URLs.

Known Vulnerable Dependency: Pillow — 10 advisory(ies): CVE-2016-2533 (Pillow buffer overflow in ImagingPcdDecode); CVE-2023-50447 (Arbitrary Code Execution in Pillow); CVE-2021-27922 (Pillow Uncontrolled Resource Consumption) +7 more

Critical

Category: Supply Chain
Confidence: 92% confidence
Finding: The requirements file includes Pillow, and the analyzer reports numerous known vulnerabilities including memory corruption, resource-consumption, and possible code-execution issues. This skill’s apparent handling of image/video/media content makes Pillow particularly sensitive because untrusted files may trigger vulnerable decoders during normal operation.

Static analysis

No suspicious patterns detected.