ClawHub
Back to skill

Security audit

video-gen

Security checks for vulnerabilities and agentic risk

Overview

The skill is a disclosed video-generation workflow that uses OpenRouter and local media tools, with privacy and billing caveats users should understand.

Install only if you are comfortable sending narration text and selected photos to OpenRouter and related model providers, and with the API key being used for billable requests. Avoid confidential or sensitive images, and require explicit approval before submitting any image containing identifiable people, especially for the documented POC test.

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (2)

Missing User Warnings

Medium
Confidence
95% confidence
Finding
The skill clearly instructs sending user-provided narration scripts and author photos to OpenRouter's external video API, but the user-facing description does not prominently warn that these inputs leave the local environment and are transmitted to a third-party service. This creates a privacy and consent risk, especially because photos may contain sensitive personal data and the script may include private information.

Missing User Warnings

Low
Confidence
88% confidence
Finding
The skill states that an `OPENROUTER_API_KEY` is present in the environment and uses it to access an external service, but it does not provide a user-facing warning that a sensitive credential will be consumed on the user's behalf. While the key is not directly exposed in the code, using hidden credentials without disclosure can surprise users and incur privacy, billing, and trust issues.

Static analysis

No suspicious patterns detected.