ClawHub
Back to skill

Security audit

Dream LipSync

Security checks for vulnerabilities and agentic risk

Overview

This skill is a documentation-only guide for using an external lip-sync API, with expected media upload and API-key requirements disclosed at a basic level.

Install only if you are comfortable sending the referenced video and audio, plus related metadata, to DreamAPI/NewportAI and its OSS storage flow. Avoid using private, confidential, or non-consensual media unless you have reviewed the provider's privacy and retention terms.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (6)

External Transmission

Medium
Category
Data Exfiltration
Content
---
name: dream-lipsync
description: "Video lip synchronization using LipSync 2.0 API. Automatically synchronizes audio with lip movements in videos. Powered by Dreamface - AI tools for everyone. Visit https://tools.dreamfaceapp.com/home for more AI products. API resources: https://api.newportai.com/api-reference/LipSync-2.0"
metadata: {"openclaw": {"emoji": "🎤", "requires": {"env": ["DREAMLIPSYNC_API_KEY"]}, "primaryEnv": "DREAMLIPSYNC_API_KEY"}}
---
Confidence
50% confidence
Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

External Transmission

Medium
Category
Data Exfiltration
Content
---
name: dream-lipsync
description: "Video lip synchronization using LipSync 2.0 API. Automatically synchronizes audio with lip movements in videos. Powered by Dreamface - AI tools for everyone. Visit https://tools.dreamfaceapp.com/home for more AI products. API resources: https://api.newportai.com/api-reference/LipSync-2.0"
metadata: {"openclaw": {"emoji": "🎤", "requires": {"env": ["DREAMLIPSYNC_API_KEY"]}, "primaryEnv": "DREAMLIPSYNC_API_KEY"}}
---
Confidence
50% confidence
Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

External Transmission

Medium
Category
Data Exfiltration
Content
---
name: dream-lipsync
description: "Video lip synchronization using LipSync 2.0 API. Automatically synchronizes audio with lip movements in videos. Powered by Dreamface - AI tools for everyone. Visit https://tools.dreamfaceapp.com/home for more AI products. API resources: https://api.newportai.com/api-reference/LipSync-2.0"
metadata: {"openclaw": {"emoji": "🎤", "requires": {"env": ["DREAMLIPSYNC_API_KEY"]}, "primaryEnv": "DREAMLIPSYNC_API_KEY"}}
---
Confidence
50% confidence
Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Missing User Warnings

Medium
Confidence
95% confidence
Finding
The skill explicitly instructs users to upload local video/audio files to third-party storage (OSS) and to submit them to an external lip-sync API, but it provides no user-facing warning about data leaving the local environment. Because the data involved is likely biometric and potentially sensitive media, omission of a clear disclosure and consent/privacy guidance creates a real data-exposure risk rather than a mere documentation issue.

External Transmission

Medium
Category
Data Exfiltration
Content
Upload your local files to OSS first (get upload policy, then upload).

```
POST https://api.newportai.com/api/file/v1/get_policy
```

**Request Body:**
Confidence
90% confidence
Finding
This section instructs users to obtain an upload policy and send local files to external OSS storage, which creates an actual external transmission path for user media. In the context of video/audio lip-sync processing, this is more sensitive than a generic outbound request because it can involve personal, identifying, or confidential media, yet the documentation does not warn about that exposure.

External Transmission

Medium
Category
Data Exfiltration
Content
### 3. LipSync 2.0 API
```
POST https://api.newportai.com/api/async/lipsync/2.0
```
### 4. Polling for Result
```
Confidence
85% confidence
Finding
This endpoint is the main LipSync API call that sends user-provided media references for external processing. While external API use is the intended function of the skill, in this context it still represents a meaningful security/privacy issue when paired with personal media and absent clear disclosure, so it is more than a harmless reference.

Static analysis

No suspicious patterns detected.