ClawHub
Back to skill

Security audit

Utilia Audio Normalization

Security checks across malware telemetry and agentic risk

Overview

This skill appears to do what it says: use a paid third-party service to normalize user-approved public audio files.

Use this only with a dedicated low-balance Solana USDC wallet, approve each paid call deliberately, and submit only public HTTPS audio URLs you are comfortable sharing with Utilia. Do not paste private keys into chat; configure them only through the local environment or keypair path as described.

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (1)

External Transmission

Medium
Category
Data Exfiltration
Content
- Processing: audio only; video tracks and metadata are removed.

If the user needs raw structured output instead of a file, call the remote MCP tool
`normalize_audio` at `https://api.utilia.ink/mcp` with `url`, `targetLufs`, and
`maxSeconds`.
Confidence
88% confidence
Finding
The skill explicitly instructs the agent to send a user-supplied public audio URL to a third-party remote MCP endpoint, which is an external data transmission. Even though the URL is public and the skill notes some privacy limits, this still exposes user-provided resource identifiers and associated request metadata to an external service, creating privacy, provenance, and SSRF-style risk if URL validation is weak.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.