ClawHub
Back to skill

Security audit

AI播客生成

Security checks for vulnerabilities and agentic risk

Overview

This skill is a coherent MagicPodcast API integration that sends user-provided text or PDF URLs to an external podcast-generation service, with no hidden persistence or unrelated behavior found.

Install only if you are comfortable sending the provided text, notes, or public PDF URLs to MagicPodcast for processing. Do not use it with confidential, regulated, or proprietary documents unless you have reviewed the service's privacy and retention terms and have permission to share that content externally.

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (2)

Missing User Warnings

Medium
Confidence
93% confidence
Finding
The skill sends user-provided PDFs, text, or URLs to a third-party API, but the opening description does not prominently disclose that external transmission occurs. This is dangerous because users or orchestrators may provide sensitive documents under the false impression processing is local, leading to unintended exposure of confidential content.

External Transmission

Medium
Category
Data Exfiltration
Content
# ...
payload="$(jq -n --arg pdfUrl "$PDF_URL" --arg language "$LANGUAGE" '{pdfUrl:$pdfUrl,language:$language}')"
# ...
curl -sS -X POST "$MAGICPODCAST_API_URL/agent/v1/podcasts/pdf" \
  -H "Content-Type: application/json" \
  -H "x-api-key: $MAGICPODCAST_API_KEY" \
  --data-binary "$payload"
Confidence
97% confidence
Finding
The documented curl commands exfiltrate user-supplied content to an external service, including PDF URLs or raw text payloads, using an API key. While this is the intended function of the skill, it remains security-relevant because sensitive internal documents, notes, or links may be transmitted outside the local trust boundary to a third party.

Static analysis

No suspicious patterns detected.