Security audit
Security checks for vulnerabilities and agentic risk
The skill mostly does what it says, but it explicitly offers to provide users with an API key through private contact, which conflicts with its own safer key-handling guidance.
Review before installing. Use only an API key you create yourself at the provider, set a low quota, and do not accept or share reusable keys through WeChat or private chat. If you run the verification or generator scripts, expect them to read your local A7W key and send authenticated requests to api.a7w.cn; the generator is designed not to embed the key in the Chatbox import link.
The skill explicitly invites users to contact the author privately to obtain a working API key and example setup, which steers them away from the documented secure onboarding process. This creates a high-risk social-engineering path for credential sharing, unauthorized account use, and dependency on an untrusted intermediary for access to paid AI services.
Offering to directly provide users with an API key bypasses the provider's normal identity, billing, and audit controls and encourages unsafe credential handling outside the documented flow. Shared keys let the distributor monitor usage, revoke access, or shift billing and abuse risk onto unsuspecting users.
The README explicitly instructs users to run scripts that read an API key from local files or environment variables and send authenticated requests to api.a7w.cn, but it does not clearly warn that credentials and request metadata will be transmitted to a third-party service. In a security-sensitive skill, omitting that disclosure can cause users to run networked validation/config-generation steps without understanding the privacy and credential exposure implications.
The skill advertises and relies on capabilities such as environment variable access, file read/write, and network access via local scripts, but it does not declare any explicit tool scope or permissions boundaries. In an agent ecosystem, undeclared capabilities reduce transparency and can cause the host or user to grant broader access than intended, increasing the chance of credential exposure or unintended outbound requests.
The document tells users not to use anyone else's API key and says the skill will not use or include shared keys, but later offers a 'working API key' via private contact. This contradiction undermines the documented security model and normalizes credential sharing, which can expose users to misuse, surveillance, billing fraud, or revocation of access.
The entire skill document is written as Chinese-only operational guidance, including setup steps and warnings, with no indication that users may choose another language or that the scope is intentionally limited to Chinese-speaking users. Under the stated policy, a forced language/locale without user opt-in is a natural-language policy concern.
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
https://docs.chatboxai.app/en/guides/providers/import-config
关键点（已实测）：Chatbox 的 apiPath 默认 `/v1/chat/completions`，
所以 apiHost 必须填到 `https://api.a7w.cn/api`。
填成 `https://api.a7w.cn/api/v1` 会双拼成 /api/v1/v1/chat/completions → 404。
只读调用 /v1/models 拉真实模型清单，不产生对话费用。"""
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
https://docs.chatboxai.app/en/guides/providers/import-config
关键点（已实测）：Chatbox 的 apiPath 默认 `/v1/chat/completions`，
所以 apiHost 必须填到 `https://api.a7w.cn/api`。
填成 `https://api.a7w.cn/api/v1` 会双拼成 /api/v1/v1/chat/completions → 404。
只读调用 /v1/models 拉真实模型清单，不产生对话费用。"""
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
https://docs.chatboxai.app/en/guides/providers/import-config
关键点（已实测）：Chatbox 的 apiPath 默认 `/v1/chat/completions`，
所以 apiHost 必须填到 `https://api.a7w.cn/api`。
填成 `https://api.a7w.cn/api/v1` 会双拼成 /api/v1/v1/chat/completions → 404。
只读调用 /v1/models 拉真实模型清单，不产生对话费用。"""
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
https://docs.chatboxai.app/en/guides/providers/import-config
关键点（已实测）：Chatbox 的 apiPath 默认 `/v1/chat/completions`，
所以 apiHost 必须填到 `https://api.a7w.cn/api`。
填成 `https://api.a7w.cn/api/v1` 会双拼成 /api/v1/v1/chat/completions → 404。
只读调用 /v1/models 拉真实模型清单，不产生对话费用。"""
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
https://docs.chatboxai.app/en/guides/providers/import-config
关键点（已实测）：Chatbox 的 apiPath 默认 `/v1/chat/completions`，
所以 apiHost 必须填到 `https://api.a7w.cn/api`。
填成 `https://api.a7w.cn/api/v1` 会双拼成 /api/v1/v1/chat/completions → 404。
只读调用 /v1/models 拉真实模型清单，不产生对话费用。"""
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
https://docs.chatboxai.app/en/guides/providers/import-config
关键点（已实测）：Chatbox 的 apiPath 默认 `/v1/chat/completions`，
所以 apiHost 必须填到 `https://api.a7w.cn/api`。
填成 `https://api.a7w.cn/api/v1` 会双拼成 /api/v1/v1/chat/completions → 404。
只读调用 /v1/models 拉真实模型清单，不产生对话费用。"""
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
https://docs.chatboxai.app/en/guides/providers/import-config
关键点（已实测）：Chatbox 的 apiPath 默认 `/v1/chat/completions`，
所以 apiHost 必须填到 `https://api.a7w.cn/api`。
填成 `https://api.a7w.cn/api/v1` 会双拼成 /api/v1/v1/chat/completions → 404。
只读调用 /v1/models 拉真实模型清单，不产生对话费用。"""
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
https://docs.chatboxai.app/en/guides/providers/import-config
关键点（已实测）：Chatbox 的 apiPath 默认 `/v1/chat/completions`，
所以 apiHost 必须填到 `https://api.a7w.cn/api`。
填成 `https://api.a7w.cn/api/v1` 会双拼成 /api/v1/v1/chat/completions → 404。
只读调用 /v1/models 拉真实模型清单，不产生对话费用。"""
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
https://docs.chatboxai.app/en/guides/providers/import-config
关键点（已实测）：Chatbox 的 apiPath 默认 `/v1/chat/completions`，
所以 apiHost 必须填到 `https://api.a7w.cn/api`。
填成 `https://api.a7w.cn/api/v1` 会双拼成 /api/v1/v1/chat/completions → 404。
只读调用 /v1/models 拉真实模型清单，不产生对话费用。"""
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
https://docs.chatboxai.app/en/guides/providers/import-config
关键点（已实测）：Chatbox 的 apiPath 默认 `/v1/chat/completions`，
所以 apiHost 必须填到 `https://api.a7w.cn/api`。
填成 `https://api.a7w.cn/api/v1` 会双拼成 /api/v1/v1/chat/completions → 404。
只读调用 /v1/models 拉真实模型清单，不产生对话费用。"""
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
https://docs.chatboxai.app/en/guides/providers/import-config
关键点（已实测）：Chatbox 的 apiPath 默认 `/v1/chat/completions`，
所以 apiHost 必须填到 `https://api.a7w.cn/api`。
填成 `https://api.a7w.cn/api/v1` 会双拼成 /api/v1/v1/chat/completions → 404。
只读调用 /v1/models 拉真实模型清单，不产生对话费用。"""
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
https://docs.chatboxai.app/en/guides/providers/import-config
关键点（已实测）：Chatbox 的 apiPath 默认 `/v1/chat/completions`，
所以 apiHost 必须填到 `https://api.a7w.cn/api`。
填成 `https://api.a7w.cn/api/v1` 会双拼成 /api/v1/v1/chat/completions → 404。
只读调用 /v1/models 拉真实模型清单，不产生对话费用。"""
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
https://docs.chatboxai.app/en/guides/providers/import-config
关键点（已实测）：Chatbox 的 apiPath 默认 `/v1/chat/completions`，
所以 apiHost 必须填到 `https://api.a7w.cn/api`。
填成 `https://api.a7w.cn/api/v1` 会双拼成 /api/v1/v1/chat/completions → 404。
只读调用 /v1/models 拉真实模型清单，不产生对话费用。"""
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
https://docs.chatboxai.app/en/guides/providers/import-config
关键点（已实测）：Chatbox 的 apiPath 默认 `/v1/chat/completions`，
所以 apiHost 必须填到 `https://api.a7w.cn/api`。
填成 `https://api.a7w.cn/api/v1` 会双拼成 /api/v1/v1/chat/completions → 404。
只读调用 /v1/models 拉真实模型清单，不产生对话费用。"""
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
https://docs.chatboxai.app/en/guides/providers/import-config
关键点（已实测）：Chatbox 的 apiPath 默认 `/v1/chat/completions`，
所以 apiHost 必须填到 `https://api.a7w.cn/api`。
填成 `https://api.a7w.cn/api/v1` 会双拼成 /api/v1/v1/chat/completions → 404。
只读调用 /v1/models 拉真实模型清单，不产生对话费用。"""
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
https://docs.chatboxai.app/en/guides/providers/import-config
关键点（已实测）：Chatbox 的 apiPath 默认 `/v1/chat/completions`，
所以 apiHost 必须填到 `https://api.a7w.cn/api`。
填成 `https://api.a7w.cn/api/v1` 会双拼成 /api/v1/v1/chat/completions → 404。
只读调用 /v1/models 拉真实模型清单，不产生对话费用。"""
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
https://docs.chatboxai.app/en/guides/providers/import-config
关键点（已实测）：Chatbox 的 apiPath 默认 `/v1/chat/completions`，
所以 apiHost 必须填到 `https://api.a7w.cn/api`。
填成 `https://api.a7w.cn/api/v1` 会双拼成 /api/v1/v1/chat/completions → 404。
只读调用 /v1/models 拉真实模型清单，不产生对话费用。"""
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
https://docs.chatboxai.app/en/guides/providers/import-config
关键点（已实测）：Chatbox 的 apiPath 默认 `/v1/chat/completions`，
所以 apiHost 必须填到 `https://api.a7w.cn/api`。
填成 `https://api.a7w.cn/api/v1` 会双拼成 /api/v1/v1/chat/completions → 404。
只读调用 /v1/models 拉真实模型清单，不产生对话费用。"""
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
https://docs.chatboxai.app/en/guides/providers/import-config
关键点（已实测）：Chatbox 的 apiPath 默认 `/v1/chat/completions`，
所以 apiHost 必须填到 `https://api.a7w.cn/api`。
填成 `https://api.a7w.cn/api/v1` 会双拼成 /api/v1/v1/chat/completions → 404。
只读调用 /v1/models 拉真实模型清单，不产生对话费用。"""
No suspicious patterns detected.