ClawHub
Back to skill

Security audit

SpotiClaw

Security checks across malware telemetry and agentic risk

Overview

SpotiClaw is a disclosed Spotify API client, but installing it gives the agent OAuth-based access to read and change parts of your Spotify account.

Install only if you want an agent to control Spotify for you. Protect .env and .spotify_cache like credentials, use a Spotify app you control, review the OAuth scopes, give explicit approval for playlist/library/playback changes, and revoke the Spotify app or delete the cache if you stop using it.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (7)

Intent-Code Divergence

Medium
Confidence
87% confidence
Finding
The docstring makes a strong security claim that tokens are kept secure and never pass through the AI model, but the script writes OAuth tokens to a plaintext .spotify_cache file and instructs users to manually transfer it into the agent skill directory. That creates a real risk of token exposure through local file compromise, accidental inclusion in repos, insecure transfer, or unintended agent access, and the reassuring language may cause users to underestimate that risk.

Missing User Warnings

Medium
Confidence
84% confidence
Finding
This section documents playlist creation, updates, item addition/removal, and deletion without prominent warnings, confirmation guidance, or emphasis that these actions modify a user's Spotify account state. In an agent setting, that can lead to unintended destructive actions or silent account changes if the skill is invoked without explicit user confirmation.

Missing User Warnings

Medium
Confidence
83% confidence
Finding
The code persists refreshed OAuth token material, including refresh tokens, to a local cache file without setting restrictive permissions or ensuring secure storage. On multi-user systems or misconfigured environments, other local users or processes could read the token file and impersonate the user against Spotify APIs until the token is revoked or expires.

Unpinned Dependencies

Low
Category
Supply Chain
Content
requests
python-dotenv
Confidence
94% confidence
Finding
requests

Unpinned Dependencies

Low
Category
Supply Chain
Content
requests
python-dotenv
Confidence
91% confidence
Finding
python-dotenv

Known Vulnerable Dependency: requests — 10 advisory(ies): CVE-2014-1830 (Exposure of Sensitive Information to an Unauthorized Actor in Requests); CVE-2024-47081 (Requests vulnerable to .netrc credentials leak via malicious URLs); CVE-2024-35195 (Requests `Session` object does not verify requests after making first request wi) +7 more

High
Category
Supply Chain
Confidence
97% confidence
Finding
requests

Known Vulnerable Dependency: python-dotenv — 1 advisory(ies): CVE-2026-28684 (python-dotenv: Symlink following in set_key allows arbitrary file overwrite via )

Low
Category
Supply Chain
Confidence
83% confidence
Finding
python-dotenv

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.