ClawHub
Back to skill

Security audit

Multi Shot Video

Security checks across malware telemetry and agentic risk

Overview

This is a documentation-only skill for generating multi-shot videos with Runware models, with no hidden execution or unrelated data access found.

Before installing, be aware that using this skill can send prompts and optional anchor images to Runware video models and may incur provider charges, especially when optional audio is enabled. No hidden local access or automatic execution was found.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (1)

Missing User Warnings

Low
Confidence
83% confidence
Finding
This markdown file includes a recipe with `audio: true` and later notes that it "earns its surcharge," but it does not present this as a caution or user-facing warning before use. Because the skill description demonstrates behavior that can affect output content and cost, it should clearly disclose that enabling audio adds generated audio and may incur additional charges.

VirusTotal

63/63 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.