ClawHub
Back to skill

Security audit

SOTA Zero-shot Voice Cloning TTS

Security checks for vulnerabilities and agentic risk

Overview

This skill is a straightforward voice-generation helper that uses a disclosed external MOSS API, with privacy considerations around sending voice audio and saving generated audio.

Before installing, treat any reference voice clip, local audio path, or reference URL as data that may be sent to the external MOSS API. Avoid private/internal URLs or sensitive voice samples unless you are comfortable sharing them with that provider, keep the API key protected, and delete generated audio files when they are no longer needed.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (2)

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

The skill instructs the agent to upload local audio files or send reference audio URLs to an external MOSS API, but it does not warn the user that their audio or linked content will leave the local environment. This creates a real privacy and consent issue because users may provide sensitive voice samples or internal URLs without understanding they are being transmitted to a third-party service.

Content

No source excerpt is available for this finding.

Missing User Warnings

Low
Category
Not specified by scanner
Confidence
88% confidence
Finding

The skill says it will return an output file path for generated audio, but it does not warn the user that synthesized speech will be written to local storage. This is a genuine but lower-severity issue because generated audio may contain sensitive spoken content and could persist on disk longer than the user expects.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.