Dangerous exec
Critical
- Finding
- Shell command execution detected (child_process).
Anime Image Generator
Security checks across static analysis, malware telemetry, and agentic risk
Overview
The skill's requirements and runtime actions are consistent with a WeryAI-backed anime image generator, but it will install Node dependencies and can persist your IMAGE_GEN_API_KEY locally after you approve — review the bundled code and be comfortable with npm installs and a local .env write before enabling it.
This skill appears to do what it claims, but note the following before installing: 1) It will run npm install across bundled packages (bootstrap/ensure-ready) — review package.json and vendor code if you want to audit what will be installed. 2) The agent can write a local .env file with your IMAGE_GEN_API_KEY after you approve; if you prefer, keep the key in your environment rather than allowing a file write. 3) Network calls go to api.weryai.com and docs.weryai.com as expected; there are no other obvious external endpoints in the reviewed files. If you have low tolerance for third-party npm installs or automatic file writes, consider running the skill in an isolated environment or decline the automatic bootstrap/persist actions and perform setup manually. If you want more assurance, provide the full contents of the omitted files for a deeper review.
SkillSpector
By NVIDIA
SkillSpector findings are pending for this release.
Static analysis
Dangerous exec
Critical
- Finding
- Shell command execution detected (child_process).
Dangerous exec
Critical
- Finding
- Shell command execution detected (child_process).
Dangerous exec
Critical
- Finding
- Shell command execution detected (child_process).
Dangerous exec
Critical
- Finding
- Shell command execution detected (child_process).
Dangerous exec
Critical
- Finding
- Shell command execution detected (child_process).
Dangerous exec
Critical
- Finding
- Shell command execution detected (child_process).
Dangerous exec
Critical
- Finding
- Shell command execution detected (child_process).
Dangerous exec
Critical
- Finding
- Shell command execution detected (child_process).
Dangerous exec
Critical
- Finding
- Shell command execution detected (child_process).
Dangerous exec
Critical
- Finding
- Shell command execution detected (child_process).
Dangerous exec
Critical
- Finding
- Shell command execution detected (child_process).
Env credential access
Critical
- Finding
- Environment variable access combined with network send.
Env credential access
Critical
- Finding
- Environment variable access combined with network send.
Potential exfiltration
Warn
- Finding
- File read combined with network send (possible exfiltration).
Potential exfiltration
Warn
- Finding
- File read combined with network send (possible exfiltration).
VirusTotal
No VirusTotal findings