ClawHub
Back to skill

Security audit

Pi Speaker

Security checks for vulnerabilities and agentic risk

Overview

This skill transparently plays requested TTS audio on the gateway speaker and does not show hidden persistence, exfiltration, or destructive behavior.

Install this only on a gateway where local speaker playback is intended. Be aware that requests using the skill can run local audio playback commands and make sound on the host's default speaker; review any agent action before using it in shared or quiet environments.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Rogue AgentSelf-Modification, Session Persistence
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (3)

Session Persistence

Medium
Category
Rogue Agent
Confidence
65% confidence
Finding

Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.

Content

Scanner excerpt · openclaw-speaker-play.sh (reported line 20)May include surrounding context.

sh
fi

if command -v paplay >/dev/null 2>&1; then
  nohup paplay "$path" >/dev/null 2>&1 &
elif command -v pw-play >/dev/null 2>&1; then
  nohup pw-play "$path" >/dev/null 2>&1 &
else

Session Persistence

Medium
Category
Rogue Agent
Confidence
65% confidence
Finding

Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.

Content

Scanner excerpt · openclaw-speaker-play.sh (reported line 22)May include surrounding context.

sh
fi

if command -v paplay >/dev/null 2>&1; then
  nohup paplay "$path" >/dev/null 2>&1 &
elif command -v pw-play >/dev/null 2>&1; then
  nohup pw-play "$path" >/dev/null 2>&1 &
else

Missing User Warnings

Low
Category
Not specified by scanner
Confidence
87% confidence
Finding

The skill explicitly instructs the agent to invoke host-side playback commands via exec, which causes a real-world side effect on the gateway host without requiring any explicit user-facing warning or confirmation step. While this is core to the skill’s purpose and not inherently malicious, it can still surprise users, trigger unwanted audio output, or be abused for nuisance actions if invoked inappropriately.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.