Security audit

Crazyrouter Stt

Security checks for vulnerabilities and agentic risk

Overview

This transcription skill does what it claims, but it can upload recordings and the API key to an undocumented, environment-controlled API destination.

Review before installing. Only use this skill with recordings you are willing to send to Crazyrouter or to whatever endpoint CRAZYROUTER_BASE_URL names in the runtime environment. Prefer removing or tightly controlling CRAZYROUTER_BASE_URL, and use a limited/rotatable API key if available.

A.I.G

Vulnerability Patterns

Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally

Findings (1)

T09 · Insecure Skill Coding Practices

Error

Location: scripts/main.mjs:6
Finding: Unvalidated API Base URL Enables Credential and Media Disclosure
Content: View full analysis
Remediation: View remediation

SkillSpector

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (2)

Missing User Warnings

Medium

Category: Not specified by scanner
Confidence: 96% confidence
Finding: The skill routes user-supplied audio/video content to a third-party service for transcription, but the description does not clearly warn users that their files leave the local environment and are sent to Crazyrouter. This creates a privacy and data-handling risk because users may provide sensitive recordings without informed consent or awareness of external processing.
Content: No source excerpt is available for this finding.

Missing User Warnings

Medium

Category: Not specified by scanner
Confidence: 93% confidence
Finding: The skill uploads the full user-supplied audio file to a third-party remote API for transcription, but the code provides no explicit warning, consent check, or disclosure at execution time that potentially sensitive audio/video contents will leave the local environment. This can expose private conversations, credentials spoken aloud, or regulated data to an external service, especially if users assume processing is local.
Content: No source excerpt is available for this finding.

Static analysis

Detected: suspicious.env_credential_access

Environment variable access combined with network send.

Critical

Code: suspicious.env_credential_access
Location: scripts/main.mjs:6