ClawHub
Back to skill

Security audit

Digital Avatar

Security checks for vulnerabilities and agentic risk

Overview

The skill is coherent and not deceptive, but it enables realistic avatar and voice-cloning workflows with only minimal consent, privacy, and credential-safety guidance.

Review this skill carefully before installing. Use it only with media you own or have explicit permission to use, especially for voices and real-person photos. Store provider credentials in a secret manager or environment-specific secure config rather than checked-in files, and check each backend provider's privacy, retention, and commercial-use terms before uploading personal media.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (3)

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
89% confidence
Finding

The skill explicitly supports voice cloning and photo-based avatar generation but only provides minimal safety guidance, limited to a brief note about photo authorization. Because these capabilities enable impersonation, biometric privacy abuse, and non-consensual synthetic media creation, the absence of explicit consent, identity-verification, and misuse warnings materially increases the risk of harmful use.

Content

No source excerpt is available for this finding.

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
88% confidence
Finding

The guide instructs users to connect several external avatar/video generation providers but does not disclose that user prompts, photos, voice, and generated media may be transmitted to third-party services. Because this skill handles digital avatars and talking-head video, the omitted warning is more sensitive than usual: users may upload real-person images or biometric-like media without understanding the privacy, compliance, and data residency implications.

Content

No source excerpt is available for this finding.

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
92% confidence
Finding

The documentation shows users how to place API credentials, including an access key and secret key, into a JSON configuration example without any warning about secure storage, secret rotation, or avoiding commits to source control. In an agent skill context, users often copy examples directly, so this increases the likelihood that long-lived third-party credentials will be stored insecurely or leaked through repositories, logs, or shared skill files.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.