ClawHub
Back to skill

Security audit

Dlazy Audio音频生成

Security checks for vulnerabilities and agentic risk

Overview

This skill is mostly an audio-generation wrapper for dLazy, but it can run CLI commands and automatically upload local media files to a third-party service with overbroad activation wording.

Review before installing. Use this only when you intentionally want dLazy cloud audio generation, and confirm any local audio, video, or image file is safe to upload to dLazy. Do not paste API keys into chat; prefer environment variables or the documented auth flow, and rotate the key if it may have been exposed.

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Vague Triggers

Medium
Confidence
87% confidence
Finding
The skill description includes very broad activation/use guidance such as 'when needing video processing, audio editing, media conversion, dubbing generation,' which goes well beyond the actual stated scope of an audio-generation CLI. Overbroad triggers can cause an agent to invoke this skill in inappropriate contexts and then execute shell commands or transmit data to external services without sufficiently specific user intent.

Missing User Warnings

Medium
Confidence
95% confidence
Finding
The skill states that local image/video/audio paths are automatically uploaded to dLazy media storage, but it does not pair that behavior with a prominent, user-facing consent warning at the point of use. In an agent context, this creates a real data exfiltration/privacy risk because local files may be sent to a third-party service simply by invoking the skill on a path the user did not realize would leave the machine.

Static analysis

No suspicious patterns detected.