Security audit
Security checks for vulnerabilities and agentic risk
This skill is a documented clothing design integration that sends user-provided design inputs to an external design service, with no evidence of hidden, destructive, or persistent behavior.
Before installing, confirm you are comfortable sending clothing prompts, reference image URLs, brand assets, tags, and session metadata to the DeepNLP/Craftsman Agent service. Do not include confidential designs, personal images, secrets, or unreleased brand material unless you trust that service's privacy and retention practices. Prefer pinning the onekey CLI version if you use the npx example.
The manifest description and name present the skill as specifically focused on coats, yet the file documentation immediately expands scope to a general clothing designer supporting T-shirts, shirts, hoodies, dresses, pants, hats, scarves, gloves, socks, and more. This is a semantic mismatch in stated purpose versus documented/implemented API scope.
Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.
[Manufacturing on Demand Send Designs to Factory]
| API | Description |
|---------------------------------|--------------------------------------------------------------------------------------------------------------------------------|
| clothing_generator_design_draft | Generate Design Draft of your preferred Clothing type, e.g. shirts, texture, dimension, customized text and logo for printing. |
Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.
#### Requests Input Parameter
| Parameter | Description |
| ------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| `prompt` | Text description of the desired clothing style, material, fit, dimensions, decoration, printing, personalization, or manufacturing intent |
| `images` | Array of source image URLs used as visual references |
Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.
| Parameter | Description |
| ------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| `prompt` | Text description of the desired clothing style, material, fit, dimensions, decoration, printing, personalization, or manufacturing intent |
| `images` | Array of source image URLs used as visual references |
| `template_id` | Clothing template ID such as `t-shirt`, `shirt`, `polo-shirt`, `hoodie`, `jacket`, `coat`, `dress`, `skirt`, `pants`, `jeans`, `shorts`, `hat`, `scarf`, `gloves`, or `socks` |
| `options` | Structured customization parameters defined by the selected clothing template |
| `provider_model_id` | Clothing design provider/model identifier; `default` is supported |
Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.
| `prompt` | Text description of the desired clothing style, material, fit, dimensions, decoration, printing, personalization, or manufacturing intent |
| `images` | Array of source image URLs used as visual references |
| `template_id` | Clothing template ID such as `t-shirt`, `shirt`, `polo-shirt`, `hoodie`, `jacket`, `coat`, `dress`, `skirt`, `pants`, `jeans`, `shorts`, `hat`, `scarf`, `gloves`, or `socks` |
| `options` | Structured customization parameters defined by the selected clothing template |
| `provider_model_id` | Clothing design provider/model identifier; `default` is supported |
| `session_name` | Name of the generated workspace session |
| `tag_list` | Optional tags associated with the generation |
Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.
| `images` | Array of source image URLs used as visual references |
| `template_id` | Clothing template ID such as `t-shirt`, `shirt`, `polo-shirt`, `hoodie`, `jacket`, `coat`, `dress`, `skirt`, `pants`, `jeans`, `shorts`, `hat`, `scarf`, `gloves`, or `socks` |
| `options` | Structured customization parameters defined by the selected clothing template |
| `provider_model_id` | Clothing design provider/model identifier; `default` is supported |
| `session_name` | Name of the generated workspace session |
| `tag_list` | Optional tags associated with the generation |
| `mode` | Generation mode: `basic`, `standard`, `advanced`, or `demo` |
Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.
| `template_id` | Clothing template ID such as `t-shirt`, `shirt`, `polo-shirt`, `hoodie`, `jacket`, `coat`, `dress`, `skirt`, `pants`, `jeans`, `shorts`, `hat`, `scarf`, `gloves`, or `socks` |
| `options` | Structured customization parameters defined by the selected clothing template |
| `provider_model_id` | Clothing design provider/model identifier; `default` is supported |
| `session_name` | Name of the generated workspace session |
| `tag_list` | Optional tags associated with the generation |
| `mode` | Generation mode: `basic`, `standard`, `advanced`, or `demo` |
Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.
| `options` | Structured customization parameters defined by the selected clothing template |
| `provider_model_id` | Clothing design provider/model identifier; `default` is supported |
| `session_name` | Name of the generated workspace session |
| `tag_list` | Optional tags associated with the generation |
| `mode` | Generation mode: `basic`, `standard`, `advanced`, or `demo` |
Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.
| `provider_model_id` | Clothing design provider/model identifier; `default` is supported |
| `session_name` | Name of the generated workspace session |
| `tag_list` | Optional tags associated with the generation |
| `mode` | Generation mode: `basic`, `standard`, `advanced`, or `demo` |
#### Input Parameter Options
Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.
**mode**: The mode as complexity of design for each generation task
| ID | Description |
| ---------- | ------------------------------------------------------------------------------------------------------------ |
| `basic` | Basic complexity for design |
| `standard` | Standard complexity for design |
Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.
| ID | Description |
| ---------- | ------------------------------------------------------------------------------------------------------------ |
| `basic` | Basic complexity for design |
| `standard` | Standard complexity for design |
| `advanced` | Advanced complexity for design |
| `demo` | Demo mode for predefined/debug API results; use `basic`, `standard`, or `advanced` for production generation |
The skill is designed to transmit user-supplied design prompts, image references, tags, and session metadata to https://agent.deepnlp.org/agent_router, which is an external service. External transmission is expected for this integration, but it remains security-relevant because sensitive business designs, personal images, or branding assets could be exfiltrated outside the local trust boundary.
export DEEPNLP_ONEKEY_ROUTER_ACCESS=your_access_key
curl -X POST "https://agent.deepnlp.org/agent_router" \
-H "Content-Type: application/json" \
-H "X-OneKey: $DEEPNLP_ONEKEY_ROUTER_ACCESS" \
-d '{
npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.
Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.
### Main Parameters
| Parameter | Type | Default | Supported IDs |
| -------------- |-------------|---------------------| --------------------------------------------------------------------------------------------------------------------------- |
| `gender` | string | `unisex` | `male`, `female`, `unisex`, `kids` |
| `sub_category` | string | `casual-shirt` | `dress-shirt`, `casual-shirt`, `oxford`, `oversized`, `crop-shirt`, `tunic`, `blouse` |
Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.
| Parameter | Type | Default | Supported IDs |
| -------------- |-------------|---------------------| --------------------------------------------------------------------------------------------------------------------------- |
| `gender` | string | `unisex` | `male`, `female`, `unisex`, `kids` |
| `sub_category` | string | `casual-shirt` | `dress-shirt`, `casual-shirt`, `oxford`, `oversized`, `crop-shirt`, `tunic`, `blouse` |
| `material` | string | `default` | `default`, `cotton`, `organic-cotton`, `linen`, `silk`, `rayon`, `polyester`, `oxford`, `poplin`, `flannel`, `cotton-blend` |
| `asset_size` | string | `default` | `default`, `xs`, `s`, `m`, `l`, `xl` |
Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.
| Parameter | Type | Default | Supported IDs |
| -------------- |-------------|---------------------| --------------------------------------------------------------------------------------------------------------------------- |
| `gender` | string | `unisex` | `male`, `female`, `unisex`, `kids` |
| `sub_category` | string | `casual-shirt` | `dress-shirt`, `casual-shirt`, `oxford`, `oversized`, `crop-shirt`, `tunic`, `blouse` |
| `material` | string | `default` | `default`, `cotton`, `organic-cotton`, `linen`, `silk`, `rayon`, `polyester`, `oxford`, `poplin`, `flannel`, `cotton-blend` |
| `asset_size` | string | `default` | `default`, `xs`, `s`, `m`, `l`, `xl` |
Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.
| `gender` | string | `unisex` | `male`, `female`, `unisex`, `kids` |
| `sub_category` | string | `casual-shirt` | `dress-shirt`, `casual-shirt`, `oxford`, `oversized`, `crop-shirt`, `tunic`, `blouse` |
| `material` | string | `default` | `default`, `cotton`, `organic-cotton`, `linen`, `silk`, `rayon`, `polyester`, `oxford`, `poplin`, `flannel`, `cotton-blend` |
| `asset_size` | string | `default` | `default`, `xs`, `s`, `m`, `l`, `xl` |
| `fit` | string | `regular` | `slim`, `regular`, `relaxed`, `oversized` |
| `collar` | string | `point` | `point`, `spread`, `mandarin`, `peter-pan`, `button-down`, `no-collar` |
| `sleeve` | string | `short` | `short`, `long`, `puff`, `bell`, `bishop`, `sleeveless` |
Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.
| `gender` | string | `unisex` | `male`, `female`, `unisex`, `kids` |
| `sub_category` | string | `casual-shirt` | `dress-shirt`, `casual-shirt`, `oxford`, `oversized`, `crop-shirt`, `tunic`, `blouse` |
| `material` | string | `default` | `default`, `cotton`, `organic-cotton`, `linen`, `silk`, `rayon`, `polyester`, `oxford`, `poplin`, `flannel`, `cotton-blend` |
| `asset_size` | string | `default` | `default`, `xs`, `s`, `m`, `l`, `xl` |
| `fit` | string | `regular` | `slim`, `regular`, `relaxed`, `oversized` |
| `collar` | string | `point` | `point`, `spread`, `mandarin`, `peter-pan`, `button-down`, `no-collar` |
| `sleeve` | string | `short` | `short`, `long`, `puff`, `bell`, `bishop`, `sleeveless` |
Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.
| `gender` | string | `unisex` | `male`, `female`, `unisex`, `kids` |
| `sub_category` | string | `casual-shirt` | `dress-shirt`, `casual-shirt`, `oxford`, `oversized`, `crop-shirt`, `tunic`, `blouse` |
| `material` | string | `default` | `default`, `cotton`, `organic-cotton`, `linen`, `silk`, `rayon`, `polyester`, `oxford`, `poplin`, `flannel`, `cotton-blend` |
| `asset_size` | string | `default` | `default`, `xs`, `s`, `m`, `l`, `xl` |
| `fit` | string | `regular` | `slim`, `regular`, `relaxed`, `oversized` |
| `collar` | string | `point` | `point`, `spread`, `mandarin`, `peter-pan`, `button-down`, `no-collar` |
| `sleeve` | string | `short` | `short`, `long`, `puff`, `bell`, `bishop`, `sleeveless` |
Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.
| `gender` | string | `unisex` | `male`, `female`, `unisex`, `kids` |
| `sub_category` | string | `casual-shirt` | `dress-shirt`, `casual-shirt`, `oxford`, `oversized`, `crop-shirt`, `tunic`, `blouse` |
| `material` | string | `default` | `default`, `cotton`, `organic-cotton`, `linen`, `silk`, `rayon`, `polyester`, `oxford`, `poplin`, `flannel`, `cotton-blend` |
| `asset_size` | string | `default` | `default`, `xs`, `s`, `m`, `l`, `xl` |
| `fit` | string | `regular` | `slim`, `regular`, `relaxed`, `oversized` |
| `collar` | string | `point` | `point`, `spread`, `mandarin`, `peter-pan`, `button-down`, `no-collar` |
| `sleeve` | string | `short` | `short`, `long`, `puff`, `bell`, `bishop`, `sleeveless` |
Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.
| `sub_category` | string | `casual-shirt` | `dress-shirt`, `casual-shirt`, `oxford`, `oversized`, `crop-shirt`, `tunic`, `blouse` |
| `material` | string | `default` | `default`, `cotton`, `organic-cotton`, `linen`, `silk`, `rayon`, `polyester`, `oxford`, `poplin`, `flannel`, `cotton-blend` |
| `asset_size` | string | `default` | `default`, `xs`, `s`, `m`, `l`, `xl` |
| `fit` | string | `regular` | `slim`, `regular`, `relaxed`, `oversized` |
| `collar` | string | `point` | `point`, `spread`, `mandarin`, `peter-pan`, `button-down`, `no-collar` |
| `sleeve` | string | `short` | `short`, `long`, `puff`, `bell`, `bishop`, `sleeveless` |
| `closure` | string | `buttons` | `buttons`, `zipper`, `snap`, `tie` |
Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.
| `sub_category` | string | `casual-shirt` | `dress-shirt`, `casual-shirt`, `oxford`, `oversized`, `crop-shirt`, `tunic`, `blouse` |
| `material` | string | `default` | `default`, `cotton`, `organic-cotton`, `linen`, `silk`, `rayon`, `polyester`, `oxford`, `poplin`, `flannel`, `cotton-blend` |
| `asset_size` | string | `default` | `default`, `xs`, `s`, `m`, `l`, `xl` |
| `fit` | string | `regular` | `slim`, `regular`, `relaxed`, `oversized` |
| `collar` | string | `point` | `point`, `spread`, `mandarin`, `peter-pan`, `button-down`, `no-collar` |
| `sleeve` | string | `short` | `short`, `long`, `puff`, `bell`, `bishop`, `sleeveless` |
| `closure` | string | `buttons` | `buttons`, `zipper`, `snap`, `tie` |
Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.
| `sub_category` | string | `casual-shirt` | `dress-shirt`, `casual-shirt`, `oxford`, `oversized`, `crop-shirt`, `tunic`, `blouse` |
| `material` | string | `default` | `default`, `cotton`, `organic-cotton`, `linen`, `silk`, `rayon`, `polyester`, `oxford`, `poplin`, `flannel`, `cotton-blend` |
| `asset_size` | string | `default` | `default`, `xs`, `s`, `m`, `l`, `xl` |
| `fit` | string | `regular` | `slim`, `regular`, `relaxed`, `oversized` |
| `collar` | string | `point` | `point`, `spread`, `mandarin`, `peter-pan`, `button-down`, `no-collar` |
| `sleeve` | string | `short` | `short`, `long`, `puff`, `bell`, `bishop`, `sleeveless` |
| `closure` | string | `buttons` | `buttons`, `zipper`, `snap`, `tie` |
Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.
| `collar` | string | `point` | `point`, `spread`, `mandarin`, `peter-pan`, `button-down`, `no-collar` |
| `sleeve` | string | `short` | `short`, `long`, `puff`, `bell`, `bishop`, `sleeveless` |
| `closure` | string | `buttons` | `buttons`, `zipper`, `snap`, `tie` |
| `pocket` | string | `none` | `none`, `chest`, `double` |
| `cuff` | string | `standard` | `standard`, `button`, `french` |
| `colors` | object | — | Garment colors; existing nested state structure |
| `print_text` | string | `"Craftsman Agent"` | Global/legacy print text |
Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.
| `sleeve` | string | `short` | `short`, `long`, `puff`, `bell`, `bishop`, `sleeveless` |
| `closure` | string | `buttons` | `buttons`, `zipper`, `snap`, `tie` |
| `pocket` | string | `none` | `none`, `chest`, `double` |
| `cuff` | string | `standard` | `standard`, `button`, `french` |
| `colors` | object | — | Garment colors; existing nested state structure |
| `print_text` | string | `"Craftsman Agent"` | Global/legacy print text |
| `print_text_front` | string | `"Craftsman Agent"` | Front print text |
No suspicious patterns detected.