Security audit
Security checks for vulnerabilities and agentic risk
The scanners classify this skill as benign because its reported behavior appears aligned with its media-generation purpose, while noting an unpinned installer command and privacy disclosures to consider; coverage is incomplete because one local reference could not be resolved.
The verdict is benign, not a guarantee of zero risk. Before installing, consider whether you are comfortable with an unpinned installer and with media or text being processed by Varg. The scan inspected two Markdown files but was marked partial because a local reference could not be resolved.
The command invokes an unpinned npm CLI and installs skill content from a mutable repository reference. Although this is not an MCP server reference as labeled, compromised or unexpectedly changed upstream content could execute with the installing user's privileges or introduce malicious agent instructions.
The README instructs users to generate a monologue from a local character image and describes a workflow using the varg API and external generation services. Although it names those services, it does not explicitly disclose that supplied images, scripts, and generated media are transmitted for remote processing, which matters when the content is private or sensitive.
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
openclaw:
requires:
anyBins:
- curl
homepage: https://varg.ai/how-to
compatibility: >-
Needs a VARG_API_KEY with curl (see the varg-ai skill) or the varg MCP connection
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
3. "Cut the audio into parts under 15s and fed each part into MiniMax H3 along with its shot"
4. "Put the generated clips together in an editing app, and that's it"
Generation runs on varg: REST `https://api.varg.ai/v2` (the `varg-ai` skill) or the MCP server `https://mcp.varg.ai/mcp`. Price the batch first (`POST /v2/estimate` or `estimate_cost`).
## 1. Ask, then go
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
[short pause] or a sigh every 8 to 14 seconds.curl -s -X POST https://api.varg.ai/v2/tools/speech/call -H "Authorization: Bearer $VARG_API_KEY" \
-H "Content-Type: application/json" -d '{"model":"eleven_v4","text":"<script with tags>","voice":"<voice id>"}'
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
curl -s -X POST https://api.varg.ai/v2/tools/video/call -H "Authorization: Bearer $VARG_API_KEY" \
-H "Content-Type: application/json" -d '{
"model": "minimax_h3_max",
"prompt": "<performance prompt>",
The workflow instructs the agent to submit an angle still and an audio segment to Varg for lip-sync generation, potentially using the user's photo and own voice collected in section 1. Although the skill identifies Varg as the generation service, it does not explicitly warn that these potentially identifying materials will be transmitted for remote processing; the voice-consent instruction addresses impersonation rather than this privacy concern.
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
curl -s -X POST https://api.varg.ai/v2/tools/video/call -H "Authorization: Bearer $VARG_API_KEY" \
-H "Content-Type: application/json" -d '{
"model": "minimax_h3_max",
"prompt": "<performance prompt>",