ClawHub
Back to skill

Security audit

Audio Content Generator

Security checks across malware telemetry and agentic risk

Overview

This is a coherent audio-generation skill that uses disclosed AI and ElevenLabs services to create MP3 files, with privacy considerations but no evidence of hidden or malicious behavior.

Install only if you are comfortable sending generated or user-approved script text to Anthropic and ElevenLabs and storing the resulting MP3 temporarily on disk. Avoid sensitive, proprietary, or regulated content unless those providers' data-handling terms are acceptable to you.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Rogue AgentSelf-Modification, Session Persistence
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Missing User Warnings

Medium
Confidence
94% confidence
Finding
The skill instructs the agent to send approved script content to ElevenLabs and save the resulting audio to a temporary local file, but it does not clearly warn users that their content leaves the system and is stored on disk. This creates a privacy and data-handling risk, especially if users include sensitive, proprietary, or personal information in scripts.

Session Persistence

Medium
Category
Rogue Agent
Content
---
name: audio-gen
description: Generate audiobooks, podcasts, or educational audio content on demand. User provides an idea or topic, Claude AI writes a script, and ElevenLabs converts it to high-quality audio. Supports multiple formats (audiobook, podcast, educational), custom lengths, and voice effects. Use when asked to create audio content, make a podcast, generate an audiobook, or produce educational audio. Returns MP3 audio file via MEDIA token.
homepage: https://github.com/clawdbot/clawdbot
metadata: {"clawdbot":{"emoji":"🎙️","requires":{"skills":["sag"],"env":["ANTHROPIC_API_KEY","ELEVENLABS_API_KEY"]},"primaryEnv":"ANTHROPIC_API_KEY"}}
---
Confidence
81% confidence
Finding
create audio content, make a podcast, generate an audiobook, or produce educational audio. Returns MP3 audio file via MEDIA token. homepage: https://github.com/clawdbot/clawdbot metadata: {"clawdbot":

VirusTotal

66/66 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.