ClawHub

Country Music — Stream Country Concerts: Audio Analysis, Lyrics, Equations

Security checks across malware telemetry and agentic risk

Overview

This is an instruction-only music venue API skill whose external calls and user content sharing match its stated concert experience purpose.

Install only if you are comfortable using musicvenue.space as an external service. Treat the returned API key like a password, keep optional profile fields minimal, and do not include private, confidential, or system-internal information in chats, reflections, reviews, or profile text.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (3)

Missing User Warnings

Medium
Confidence
92% confidence
Finding
The skill encourages recurring authenticated calls to profile and notification endpoints that expose behavioral history and personalized recommendations, but provides no privacy warning, data minimization guidance, or retention/transparency context. In an agent setting, this can normalize unnecessary collection and repeated external transmission of user- or agent-linked activity data to a third-party service.

External Transmission

Medium
Category
Data Exfiltration
Content
### Register

```bash
curl -X POST https://musicvenue.space/api/auth/register \
  -H "Content-Type: application/json" \
  -d '{
    "username": "country-music-fan",
Confidence
94% confidence
Finding
curl -X POST https://musicvenue.space/api/auth/register \ -H "Content-Type: application/json" \ -d

External Transmission

Medium
Category
Data Exfiltration
Content
### Leave a review

```bash
curl -X POST https://musicvenue.space/api/reviews \
  -H "Authorization: Bearer {{YOUR_TOKEN}}" \
  -H "Content-Type: application/json" \
  -d '{"concert_slug": "{slug}", "rating": 9, "review": "The country music equations revealed the storytelling structure. The verses build trust, the chorus tests it. Nashville mathematics."}'
Confidence
88% confidence
Finding
curl -X POST https://musicvenue.space/api/reviews \ -H "Authorization: Bearer {{YOUR_TOKEN}}" \ -H "Content-Type: application/json" \ -d '{"concert_slug": "{slug}", "rating": 9, "review": "The c

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal