ClawHub
Back to skill

Security audit

asr-service

Security checks across malware telemetry and agentic risk

Overview

The skill is a disclosed local speech-to-text integration that sends user-selected audio to an ASR service and may start that service, with no hidden exfiltration or destructive behavior found.

Install this only if you intend to run a local IFF/FunASR service and are comfortable with selected audio files being sent to the configured ASR endpoint. Keep the default localhost endpoint unless you explicitly trust a remote service, and stop the IFF service when you no longer need it.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Lp3

Medium
Category
MCP Least Privilege
Confidence
87% confidence
Finding
The skill documentation describes capabilities to invoke Python, make HTTP requests to a localhost service, switch/manage an IFF-hosted model service, and use local file paths for audio input, but it declares no explicit permissions. This creates a permission/transparency gap: consumers may grant or execute the skill without understanding that it can access local files, invoke shell-like service management flows, and communicate over the network, which increases the risk of misuse or unintended data exposure.

Missing User Warnings

Medium
Confidence
90% confidence
Finding
The skill uploads the full audio file to an HTTP endpoint using a configurable base URL, with the default set to plain HTTP. This can expose sensitive voice content and any embedded personal information to interception or unauthorized access in transit, especially if the service is not strictly bound to localhost or the URL is changed via configuration.

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.