ClawHub
Back to skill

Security audit

plaud-recordings-to-google-drive-sync

Security checks across malware telemetry and agentic risk

Overview

This skill openly automates copying Plaud recordings and transcripts into the user's Google Drive and Sheets, with no hidden local runtime or destructive behavior found.

Install only if you are comfortable syncing all new Plaud recordings into Google Drive and Google Sheets and, when Plaud transcripts are unavailable, sending audio to the configured speech-to-text service. Review the connected accounts' sharing, retention, and compliance settings before using it for confidential, regulated, or third-party recordings.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (1)

Missing User Warnings

Medium
Confidence
91% confidence
Finding
This workflow automatically exports audio recordings and transcripts from Plaud into Google Drive and Google Sheets, which can contain highly sensitive personal, business, or regulated information. Without an explicit warning and consent-oriented notice, users may enable broad third-party storage and sharing of confidential content without appreciating the privacy, compliance, and retention implications.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.