Security audit
Security checks for vulnerabilities and agentic risk
This is a disclosed external jewelry-design API skill, with some naming and privacy caveats but no evidence of hidden, destructive, or deceptive behavior.
Install only if you are comfortable using the OneKey/Craftsman external service. Treat prompts, reference image URLs, generated sessions, and share links as content sent to and hosted by the provider, and verify the onekey CLI source before using npx commands.
The manifest presents the skill as a necklace designer, but the documented API surface supports a much broader jewelry-generation service. This scope mismatch can mislead users and host platforms about what data the skill may process and which actions it may perform, weakening consent and review boundaries.
The skill explicitly sends prompts and image URLs to an external gateway, but the documentation does not clearly warn users that their content will leave the local environment. Because prompts and reference images may contain sensitive or proprietary material, this omission creates a meaningful privacy and data-governance risk.
Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.
[Manufacturing on Demand Send Designs to Factory]
| API | Description |
| ------------------------------ |--------------------------------------------------------------------------------------------------------------------------------------|
| jewelry_generator_design_draft | Generate Design Draft of your Prefered Gem Stones Images and Prompts on 1000+ Jewerly typical design patterns |
| jewelry_generator_hand_drawn_sketch | Generate Hand-Drawn Style Sketch Draft of your Prefered Gem Stones Images and Prompts on 1000+ Jewerly typical design patterns |
Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.
#### Requests Input Parameter
| Parameter | Description |
|-------------------|-------------------------------------------------------------------------------------------------------------------------------------------------|
| prompt | Text description of the desired jewelry design |
| images | Array of source image URLs used as visual references, including gemstone images |
Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.
#### Requests Input Parameter
| Parameter | Description |
|-------------------|-------------------------------------------------------------------------------------------------------------------------------------------------|
| prompt | Text description of the desired jewelry design |
| images | Array of source image URLs used as visual references, including gemstone images |
Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.
#### Requests Input Parameter
| Parameter | Description |
|-------------------|-------------------------------------------------------------------------------------------------------------------------------------------------|
| prompt | Text description of the desired jewelry design |
| images | Array of source image URLs used as visual references, including gemstone images |
Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.
| Parameter | Description |
|-------------------|-------------------------------------------------------------------------------------------------------------------------------------------------|
| prompt | Text description of the desired jewelry design |
| images | Array of source image URLs used as visual references, including gemstone images |
| template_id | Jewelry category templates including `bracelet`, `beaded-bracelet`, `ring`, `necklace`, `pet-jewelry-collar`, `earrings`, `body-chain` and more |
| options | Structured jewelry customization parameters defined by the selected templates |
Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.
| Parameter | Description |
|-------------------|-------------------------------------------------------------------------------------------------------------------------------------------------|
| prompt | Text description of the desired jewelry design |
| images | Array of source image URLs used as visual references, including gemstone images |
| template_id | Jewelry category templates including `bracelet`, `beaded-bracelet`, `ring`, `necklace`, `pet-jewelry-collar`, `earrings`, `body-chain` and more |
| options | Structured jewelry customization parameters defined by the selected templates |
Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.
| Parameter | Description |
|-------------------|-------------------------------------------------------------------------------------------------------------------------------------------------|
| prompt | Text description of the desired jewelry design |
| images | Array of source image URLs used as visual references, including gemstone images |
| template_id | Jewelry category templates including `bracelet`, `beaded-bracelet`, `ring`, `necklace`, `pet-jewelry-collar`, `earrings`, `body-chain` and more |
| options | Structured jewelry customization parameters defined by the selected templates |
Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.
| images | Array of source image URLs used as visual references, including gemstone images |
| template_id | Jewelry category templates including `bracelet`, `beaded-bracelet`, `ring`, `necklace`, `pet-jewelry-collar`, `earrings`, `body-chain` and more |
| options | Structured jewelry customization parameters defined by the selected templates |
| provider_model_id | Jewelry design provider/model identifier; `default` is supported |
| session_name | Name of the generated workspace session |
| tag_list | Optional tags associated with the generation |
| mode | Generation mode such as `basic`, `standard`, `advanced`, or `demo` |
Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.
| images | Array of source image URLs used as visual references, including gemstone images |
| template_id | Jewelry category templates including `bracelet`, `beaded-bracelet`, `ring`, `necklace`, `pet-jewelry-collar`, `earrings`, `body-chain` and more |
| options | Structured jewelry customization parameters defined by the selected templates |
| provider_model_id | Jewelry design provider/model identifier; `default` is supported |
| session_name | Name of the generated workspace session |
| tag_list | Optional tags associated with the generation |
| mode | Generation mode such as `basic`, `standard`, `advanced`, or `demo` |
Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.
| images | Array of source image URLs used as visual references, including gemstone images |
| template_id | Jewelry category templates including `bracelet`, `beaded-bracelet`, `ring`, `necklace`, `pet-jewelry-collar`, `earrings`, `body-chain` and more |
| options | Structured jewelry customization parameters defined by the selected templates |
| provider_model_id | Jewelry design provider/model identifier; `default` is supported |
| session_name | Name of the generated workspace session |
| tag_list | Optional tags associated with the generation |
| mode | Generation mode such as `basic`, `standard`, `advanced`, or `demo` |
Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.
| template_id | Jewelry category templates including `bracelet`, `beaded-bracelet`, `ring`, `necklace`, `pet-jewelry-collar`, `earrings`, `body-chain` and more |
| options | Structured jewelry customization parameters defined by the selected templates |
| provider_model_id | Jewelry design provider/model identifier; `default` is supported |
| session_name | Name of the generated workspace session |
| tag_list | Optional tags associated with the generation |
| mode | Generation mode such as `basic`, `standard`, `advanced`, or `demo` |
Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.
| template_id | Jewelry category templates including `bracelet`, `beaded-bracelet`, `ring`, `necklace`, `pet-jewelry-collar`, `earrings`, `body-chain` and more |
| options | Structured jewelry customization parameters defined by the selected templates |
| provider_model_id | Jewelry design provider/model identifier; `default` is supported |
| session_name | Name of the generated workspace session |
| tag_list | Optional tags associated with the generation |
| mode | Generation mode such as `basic`, `standard`, `advanced`, or `demo` |
Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.
| template_id | Jewelry category templates including `bracelet`, `beaded-bracelet`, `ring`, `necklace`, `pet-jewelry-collar`, `earrings`, `body-chain` and more |
| options | Structured jewelry customization parameters defined by the selected templates |
| provider_model_id | Jewelry design provider/model identifier; `default` is supported |
| session_name | Name of the generated workspace session |
| tag_list | Optional tags associated with the generation |
| mode | Generation mode such as `basic`, `standard`, `advanced`, or `demo` |
Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.
| options | Structured jewelry customization parameters defined by the selected templates |
| provider_model_id | Jewelry design provider/model identifier; `default` is supported |
| session_name | Name of the generated workspace session |
| tag_list | Optional tags associated with the generation |
| mode | Generation mode such as `basic`, `standard`, `advanced`, or `demo` |
Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.
| options | Structured jewelry customization parameters defined by the selected templates |
| provider_model_id | Jewelry design provider/model identifier; `default` is supported |
| session_name | Name of the generated workspace session |
| tag_list | Optional tags associated with the generation |
| mode | Generation mode such as `basic`, `standard`, `advanced`, or `demo` |
Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.
| options | Structured jewelry customization parameters defined by the selected templates |
| provider_model_id | Jewelry design provider/model identifier; `default` is supported |
| session_name | Name of the generated workspace session |
| tag_list | Optional tags associated with the generation |
| mode | Generation mode such as `basic`, `standard`, `advanced`, or `demo` |
Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.
Supported `template_id` include
| Template ID | Jewelry Type | Description |
|--------------------| ------------------------- |---------------------------------------------------------------------------------------------|
| bracelet | Bracelet | Gems, Chain, bangle, cuff, tennis, charm, beaded, stretch, and wrap bracelets |
| beaded-bracelet | Beaded Bracelet | Gems, Crystal, natural stone, pearl, wooden, glass, charm, stretch, and layered bracelets |
Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.
Supported `template_id` include
| Template ID | Jewelry Type | Description |
|--------------------| ------------------------- |---------------------------------------------------------------------------------------------|
| bracelet | Bracelet | Gems, Chain, bangle, cuff, tennis, charm, beaded, stretch, and wrap bracelets |
| beaded-bracelet | Beaded Bracelet | Gems, Crystal, natural stone, pearl, wooden, glass, charm, stretch, and layered bracelets |
Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.
**mode**: The mode as complexity of design for each generation task
| mode | Description |
|----------|-----------------------------------------------------------------------------------------------------------------------|
| basic | Basic Complexity for Design |
| standard | Standard Complexity for Design |
Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.
**mode**: The mode as complexity of design for each generation task
| mode | Description |
|----------|-----------------------------------------------------------------------------------------------------------------------|
| basic | Basic Complexity for Design |
| standard | Standard Complexity for Design |
Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.
| mode | Description |
|----------|-----------------------------------------------------------------------------------------------------------------------|
| basic | Basic Complexity for Design |
| standard | Standard Complexity for Design |
| advanced | Advanced Complexity for Design |
| demo | Demo mode will only return predefined results for debug and APIs purposes, for production, please use other settings. |
Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.
| mode | Description |
|----------|-----------------------------------------------------------------------------------------------------------------------|
| basic | Basic Complexity for Design |
| standard | Standard Complexity for Design |
| advanced | Advanced Complexity for Design |
| demo | Demo mode will only return predefined results for debug and APIs purposes, for production, please use other settings. |
Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.
| mode | Description |
|----------|-----------------------------------------------------------------------------------------------------------------------|
| basic | Basic Complexity for Design |
| standard | Standard Complexity for Design |
| advanced | Advanced Complexity for Design |
| demo | Demo mode will only return predefined results for debug and APIs purposes, for production, please use other settings. |
No suspicious patterns detected.