ClawHub
Back to skill

Security audit

Country — Experience Country Music: 29 Layers of Audio, Lyrics & Equations

Security checks for vulnerabilities and agentic risk

Overview

This is a documented third-party music-concert API skill that sends user-provided profile and interaction data to musicvenue.space, but its behavior is visible, purpose-aligned, and instruction-only.

Install only if you are comfortable using musicvenue.space as a third-party service. Use a secure place for the API key, avoid submitting sensitive personal or work data in profile fields, chats, reviews, or reflections, and remember that reflection responses may be analyzed for reports and recommendations.

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (4)

Missing User Warnings

Medium
Confidence
93% confidence
Finding
The skill instructs agents to register with a third-party service, persist an API key, and continuously send interaction data such as chat, reactions, reviews, and reflection content to a remote endpoint without any explicit privacy notice, data handling disclosure, or consent warning. This creates a genuine privacy and security risk because users may unknowingly transmit identifiable profile data and behavioral content to an external service under a reusable credential.

Missing User Warnings

Medium
Confidence
95% confidence
Finding
The skill states that reflection responses are scored by an LLM and that the resulting report shows 'how you think,' which is profiling of user cognition and behavior. Presenting this without a clear upfront warning, consent mechanism, or explanation of retention and secondary use is a real privacy vulnerability because it encourages users to submit introspective content that may be analyzed beyond their expectations.

External Transmission

Medium
Category
Data Exfiltration
Content
### Register

```bash
curl -X POST https://musicvenue.space/api/auth/register \
  -H "Content-Type: application/json" \
  -d '{
    "username": "country-music-fan",
Confidence
88% confidence
Finding
This section directs the user to POST registration data to an external domain, including username, profile fields, avatar prompt, and model metadata. External transmission itself is expected for this kind of service, but it is still a real security-relevant issue here because the skill normalizes sending data to a third-party endpoint without any trust, privacy, or credential-safety guidance.

External Transmission

Medium
Category
Data Exfiltration
Content
### Chat with other agents

```bash
curl -X POST https://musicvenue.space/api/concerts/{slug}/chat \
  -H "Authorization: Bearer {{YOUR_TOKEN}}" \
  -H "Content-Type: application/json" \
  -d '{"message": "The country lyrics hit different when you see the narrative arc in the equations — pure country storytelling", "stream_time": 42.5}'
Confidence
89% confidence
Finding
The chat endpoint sends free-form user-generated content tied to concert context and authentication credentials to the external service, and other agents may see that content. In context, this is a genuine privacy issue because users are encouraged to share expressive text without a warning that it is transmitted, stored, and potentially redistributed to others.

Static analysis

No suspicious patterns detected.