ClawHub
Back to skill

Security audit

Al Music Generation

Security checks for vulnerabilities and agentic risk

Overview

This skill is a disclosed ShortAPI music-generation integration guide, with expected external API calls and bounded polling for generated results.

Install this only if you intend to use ShortAPI for music generation and are comfortable sending prompts, job requests, and status queries to ShortAPI using your SHORTAPI_KEY. Review generated media URLs before inline rendering if your environment has strict content or HTML policies.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (7)

External Transmission

Medium
Category
Data Exfiltration
Content
ShortAPI provides a unified `/api/v1/job/create` endpoint for music generation natively. This skill provides an overview of all available music generation models and how to dynamically acquire the specific JSON schema required to invoke them.

- **API Endpoint**: `https://api.shortapi.ai/api/v1/job/create`
- **Category**: `text-to-audio`
- **Kind**: inference
Confidence
50% confidence
Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

External Transmission

Medium
Category
Data Exfiltration
Content
ShortAPI provides a unified `/api/v1/job/create` endpoint for music generation natively. This skill provides an overview of all available music generation models and how to dynamically acquire the specific JSON schema required to invoke them.

- **API Endpoint**: `https://api.shortapi.ai/api/v1/job/create`
- **Category**: `text-to-audio`
- **Kind**: inference
Confidence
50% confidence
Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

External Transmission

Medium
Category
Data Exfiltration
Content
ShortAPI provides a unified `/api/v1/job/create` endpoint for music generation natively. This skill provides an overview of all available music generation models and how to dynamically acquire the specific JSON schema required to invoke them.

- **API Endpoint**: `https://api.shortapi.ai/api/v1/job/create`
- **Category**: `text-to-audio`
- **Kind**: inference
Confidence
50% confidence
Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

External Transmission

Medium
Category
Data Exfiltration
Content
#### Bash (cURL) Example

```bash
response=$(curl --request POST \
  --url https://api.shortapi.ai/api/v1/job/create \
  --header "Authorization: Bearer $SHORTAPI_KEY" \
  --header "Content-Type: application/json" \
Confidence
60% confidence
Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Context-Inappropriate Capability

Medium
Confidence
95% confidence
Finding
The skill instructs the agent to continue background polling and proactively message the user after completion, expanding behavior from simple parameter discovery into autonomous long-running execution. This increases risk of unexpected external activity, user-surprising actions, and resource abuse, especially if the platform does not support bounded background jobs or explicit user consent for asynchronous follow-up.

Context-Inappropriate Capability

Low
Confidence
92% confidence
Finding
Mandating inline rendering of returned media with HTML tags introduces unnecessary presentation and content-handling behavior for a skill whose stated purpose is model discovery and integration parameter retrieval. Inline embedding of remote URLs enlarges the attack surface for unsafe content rendering, tracking, and downstream injection mistakes if URL/domain validation or HTML sanitization is incomplete.

Natural-Language Policy Violations

Low
Confidence
75% confidence
Finding
The instruction requires presenting results using specific HTML and markdown formats regardless of user preference or client context. While this is primarily a formatting requirement, it forces one presentation mode without any opt-in or alternative, which can conflict with organizational locale/presentation policy expectations if different rendering conventions are required.

Static analysis

No suspicious patterns detected.