ClawHub
Back to skill

Security audit

AI UGC Video Pipeline

Security checks for vulnerabilities and agentic risk

Overview

This skill describes a user-directed AI video generation workflow with disclosed third-party API use, and I found no hidden persistence, privilege escalation, or destructive behavior.

Before installing or using this skill, assume product details, avatar photos, product images, voice/audio, and captions may be sent to OpenAI, ElevenLabs, and fal.ai. Do not use sensitive personal images, confidential product material, or regulated data unless those providers and your account settings are approved for that use.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (1)

Missing User Warnings

Medium
Confidence
96% confidence
Finding
The skill routes user-provided product details, avatar images, product images, and audio through multiple external services including OpenAI, ElevenLabs, and fal.ai, but the documentation does not clearly warn users that this data leaves the local environment. This creates a real privacy and data-governance risk because users may unknowingly submit sensitive or proprietary content to third parties with different retention, training, or compliance practices.

Static analysis

No suspicious patterns detected.