ClawHub
Back to skill

Security audit

Pi Speaker

Security checks for vulnerabilities and agentic risk

Overview

This skill transparently plays requested TTS audio on the gateway speaker and does not show hidden persistence, exfiltration, or destructive behavior.

Install this only on a gateway where local speaker playback is intended. Be aware that requests using the skill can run local audio playback commands and make sound on the host's default speaker; review any agent action before using it in shared or quiet environments.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Rogue AgentSelf-Modification, Session Persistence
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (3)

Session Persistence

Medium
Category
Rogue Agent
Content
fi

if command -v paplay >/dev/null 2>&1; then
  nohup paplay "$path" >/dev/null 2>&1 &
elif command -v pw-play >/dev/null 2>&1; then
  nohup pw-play "$path" >/dev/null 2>&1 &
else
Confidence
65% confidence
Finding
Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.

Session Persistence

Medium
Category
Rogue Agent
Content
fi

if command -v paplay >/dev/null 2>&1; then
  nohup paplay "$path" >/dev/null 2>&1 &
elif command -v pw-play >/dev/null 2>&1; then
  nohup pw-play "$path" >/dev/null 2>&1 &
else
Confidence
65% confidence
Finding
Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.

Missing User Warnings

Low
Confidence
87% confidence
Finding
The skill explicitly instructs the agent to invoke host-side playback commands via exec, which causes a real-world side effect on the gateway host without requiring any explicit user-facing warning or confirmation step. While this is core to the skill’s purpose and not inherently malicious, it can still surprise users, trigger unwanted audio output, or be abused for nuisance actions if invoked inappropriately.

Static analysis

No suspicious patterns detected.