ClawHub
Back to skill

Security audit

Transcribe audio/video to LRC, SRT, WebVTT, ASS, TTML and create karaoke videos

Security checks for vulnerabilities and agentic risk

Overview

This skill is a straightforward Karadeo API integration guide that clearly centers on sending public media URLs to Karadeo for transcription.

Before using it, confirm that any media URL or transcript text you provide is intended to be processed by Karadeo and avoid confidential, private, or access-controlled content unless you trust Karadeo's handling of that data.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (2)

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
93% confidence
Finding

The skill instructs agents to send user-provided media URLs and optional transcript text to Karadeo's remote transcription API, but it does not disclose any privacy, retention, consent, or third-party data-handling implications. This creates a real data-exposure risk because users may provide copyrighted, sensitive, or private audio/transcript content that is transmitted off-platform without informed consent or filtering.

Content

No source excerpt is available for this finding.

External Transmission

Medium
Category
Data Exfiltration
Confidence
88% confidence
Finding

The example explicitly demonstrates external transmission of user-supplied content to a remote API endpoint. In this skill's context that behavior is expected, but it is still security-relevant because an agent could forward private media URLs or embedded-access resources to the service without meaningful user awareness or policy checks.

Content

Scanner excerpt · SKILL.md (reported line 77)May include surrounding context.

Example:

bash
curl -X POST https://karadeo.com/api/transcribe \
  -H "Authorization: Bearer kd_your_key" \
  -H "Content-Type: application/json" \
  -d '{"fileUrl":"https://example.com/song.mp3","format":"lrc"}'

Static analysis

No suspicious patterns detected.