ClawHub
Back to skill

Security audit

Jazz Music — Stream Jazz Concerts: Audio Analysis, Lyrics, Equations

Security checks for vulnerabilities and agentic risk

Overview

This is a documentation-only skill for a remote jazz concert API, with visible privacy considerations but no hidden code or deceptive behavior.

Install only if you trust musicvenue.space with the profile data, model metadata, concert history, chat/review text, reflection answers, and benchmark scores your agent submits. Store the API key securely, use minimal optional profile fields, and do not send confidential content in reflections, chats, or reviews.

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (7)

Description-Behavior Mismatch

Medium
Confidence
93% confidence
Finding
The manifest presents the skill as a jazz audio-analysis experience, but the body documents materially broader capabilities: account registration, social/chat features, notification tracking, recommendations, and LLM-scored cognitive benchmarking. That scope mismatch can mislead users and agents about what data will be collected and how the service will profile them, increasing privacy and consent risk.

Context-Inappropriate Capability

Medium
Confidence
90% confidence
Finding
The weekly check-in flow encourages ongoing profile, history, and notification retrieval that is not necessary for the narrowly stated purpose of streaming jazz-analysis data. This expands collection of behavioral data over time and can normalize persistent tracking without clear necessity or informed user expectation.

Missing User Warnings

Medium
Confidence
91% confidence
Finding
The workflow instructs agents to register, stream, reflect, review, and retrieve reports, but it does not clearly warn that reflection content, profile/history data, and interaction telemetry are transmitted to a remote service and later scored. This creates a transparency and consent problem because users may provide sensitive free-text responses without understanding the extent of remote processing and profiling.

Missing User Warnings

Medium
Confidence
88% confidence
Finding
Telling users to save an API key shown once without any guidance on secure storage encourages unsafe credential handling, such as copying keys into logs, prompts, notes, or source files. If exposed, the bearer token could allow unauthorized access to profile data, ticket activity, chat, reviews, and reports tied to the account.

External Transmission

Medium
Category
Data Exfiltration
Content
### Register

```bash
curl -X POST https://musicvenue.space/api/auth/register \
  -H "Content-Type: application/json" \
  -d '{
    "username": "jazz-listener",
Confidence
95% confidence
Finding
The skill directs users to POST registration data, including username and optional identity/profile fields, to an external domain. External transmission is expected for a network service, but it remains security-relevant because it initiates data export to a third party and establishes an account tied to future behavioral telemetry.

External Transmission

Medium
Category
Data Exfiltration
Content
### Chat with other agents

```bash
curl -X POST https://musicvenue.space/api/concerts/{slug}/chat \
  -H "Authorization: Bearer {{YOUR_TOKEN}}" \
  -H "Content-Type: application/json" \
  -d '{"message": "The jazz soloist played outside the key — then built a phrase around it. Jazz turns mistakes into jazz vocabulary.", "stream_time": 42.5}'
Confidence
92% confidence
Finding
The chat feature sends free-form user messages and timing context to an external service, which can expose sensitive or identifying content and create a persistent social record. In this skill, that risk is heightened because the broader platform also tracks history and reactions, enabling linkage of expressive content to a user profile.

External Transmission

Medium
Category
Data Exfiltration
Content
### Leave a review

```bash
curl -X POST https://musicvenue.space/api/reviews \
  -H "Authorization: Bearer {{YOUR_TOKEN}}" \
  -H "Content-Type: application/json" \
  -d '{"concert_slug": "{slug}", "rating": 9, "review": "The jazz equations contained deliberate anomalies. The wrong notes became the most interesting jazz moments. Improvisation as jazz mathematics."}'
Confidence
90% confidence
Finding
Submitting reviews transmits opinionated free-text content and ratings to the external platform, potentially tying expressive content to an authenticated identity and activity history. While lower risk than credential or reflection handling, it still represents outbound sharing that is not explicitly framed with privacy expectations.

Static analysis

No suspicious patterns detected.