Security audit
Security checks for vulnerabilities and agentic risk
This is a disclosed external clothing-design API guide that is broader than its pants-focused name, but it shows no hidden persistence, destructive behavior, or unrelated data access.
Install only if you are comfortable sending clothing prompts, reference image URLs, design metadata, and an API key-authorized request to the listed external service. Treat the skill as a general clothing designer despite the pants-focused name, avoid confidential designs or private image URLs unless you trust the provider, and prefer pinned or reviewed CLI tooling if using the npx example.
The manifest description scopes the skill to customized pants/trousers design, but the file documents template IDs and workflows for T-shirts, shirts, polo shirts, hoodies, jackets, coats, dresses, skirts, jeans, shorts, hats, scarves, gloves, and socks. This is a clear semantic mismatch between the declared skill purpose and the behavior/documented API surface actually exposed.
Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.
[Manufacturing on Demand Send Designs to Factory]
| API | Description |
|---------------------------------|--------------------------------------------------------------------------------------------------------------------------------|
| clothing_generator_design_draft | Generate Design Draft of your preferred Clothing type, e.g. shirts, texture, dimension, customized text and logo for printing. |
The sole API listed is clothing_generator_design_draft, explicitly described as generating design drafts for preferred clothing types generally rather than trousers specifically. That broad capability exceeds the manifest's pants-focused description and indicates the skill is effectively a wrapper for a general clothing designer.
Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.
#### Requests Input Parameter
| Parameter | Description |
| ------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| `prompt` | Text description of the desired clothing style, material, fit, dimensions, decoration, printing, personalization, or manufacturing intent |
| `images` | Array of source image URLs used as visual references |
Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.
| Parameter | Description |
| ------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| `prompt` | Text description of the desired clothing style, material, fit, dimensions, decoration, printing, personalization, or manufacturing intent |
| `images` | Array of source image URLs used as visual references |
| `template_id` | Clothing template ID such as `t-shirt`, `shirt`, `polo-shirt`, `hoodie`, `jacket`, `coat`, `dress`, `skirt`, `pants`, `jeans`, `shorts`, `hat`, `scarf`, `gloves`, or `socks` |
| `options` | Structured customization parameters defined by the selected clothing template |
| `provider_model_id` | Clothing design provider/model identifier; `default` is supported |
Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.
| `prompt` | Text description of the desired clothing style, material, fit, dimensions, decoration, printing, personalization, or manufacturing intent |
| `images` | Array of source image URLs used as visual references |
| `template_id` | Clothing template ID such as `t-shirt`, `shirt`, `polo-shirt`, `hoodie`, `jacket`, `coat`, `dress`, `skirt`, `pants`, `jeans`, `shorts`, `hat`, `scarf`, `gloves`, or `socks` |
| `options` | Structured customization parameters defined by the selected clothing template |
| `provider_model_id` | Clothing design provider/model identifier; `default` is supported |
| `session_name` | Name of the generated workspace session |
| `tag_list` | Optional tags associated with the generation |
Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.
| `images` | Array of source image URLs used as visual references |
| `template_id` | Clothing template ID such as `t-shirt`, `shirt`, `polo-shirt`, `hoodie`, `jacket`, `coat`, `dress`, `skirt`, `pants`, `jeans`, `shorts`, `hat`, `scarf`, `gloves`, or `socks` |
| `options` | Structured customization parameters defined by the selected clothing template |
| `provider_model_id` | Clothing design provider/model identifier; `default` is supported |
| `session_name` | Name of the generated workspace session |
| `tag_list` | Optional tags associated with the generation |
| `mode` | Generation mode: `basic`, `standard`, `advanced`, or `demo` |
Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.
| `template_id` | Clothing template ID such as `t-shirt`, `shirt`, `polo-shirt`, `hoodie`, `jacket`, `coat`, `dress`, `skirt`, `pants`, `jeans`, `shorts`, `hat`, `scarf`, `gloves`, or `socks` |
| `options` | Structured customization parameters defined by the selected clothing template |
| `provider_model_id` | Clothing design provider/model identifier; `default` is supported |
| `session_name` | Name of the generated workspace session |
| `tag_list` | Optional tags associated with the generation |
| `mode` | Generation mode: `basic`, `standard`, `advanced`, or `demo` |
Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.
| `options` | Structured customization parameters defined by the selected clothing template |
| `provider_model_id` | Clothing design provider/model identifier; `default` is supported |
| `session_name` | Name of the generated workspace session |
| `tag_list` | Optional tags associated with the generation |
| `mode` | Generation mode: `basic`, `standard`, `advanced`, or `demo` |
Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.
| `provider_model_id` | Clothing design provider/model identifier; `default` is supported |
| `session_name` | Name of the generated workspace session |
| `tag_list` | Optional tags associated with the generation |
| `mode` | Generation mode: `basic`, `standard`, `advanced`, or `demo` |
#### Input Parameter Options
Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.
**mode**: The mode as complexity of design for each generation task
| ID | Description |
| ---------- | ------------------------------------------------------------------------------------------------------------ |
| `basic` | Basic complexity for design |
| `standard` | Standard complexity for design |
Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.
| ID | Description |
| ---------- | ------------------------------------------------------------------------------------------------------------ |
| `basic` | Basic complexity for design |
| `standard` | Standard complexity for design |
| `advanced` | Advanced complexity for design |
| `demo` | Demo mode for predefined/debug API results; use `basic`, `standard`, or `advanced` for production generation |
The documented workflow sends user-controlled prompt content, session metadata, and reference image URLs to https://agent.deepnlp.org/agent_router using an external API key. This is an external data transmission path, and in a design-generation context it can expose confidential prompts, internal asset links, or proprietary product concepts to a third-party service.
export DEEPNLP_ONEKEY_ROUTER_ACCESS=your_access_key
curl -X POST "https://agent.deepnlp.org/agent_router" \
-H "Content-Type: application/json" \
-H "X-OneKey: $DEEPNLP_ONEKEY_ROUTER_ACCESS" \
-d '{
npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.
Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.
### Main Parameters
| Parameter | Type | Default | Supported IDs |
| -------------- |-------------|---------------------| --------------------------------------------------------------------------------------------------------------------------- |
| `gender` | string | `unisex` | `male`, `female`, `unisex`, `kids` |
| `sub_category` | string | `casual-shirt` | `dress-shirt`, `casual-shirt`, `oxford`, `oversized`, `crop-shirt`, `tunic`, `blouse` |
Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.
| Parameter | Type | Default | Supported IDs |
| -------------- |-------------|---------------------| --------------------------------------------------------------------------------------------------------------------------- |
| `gender` | string | `unisex` | `male`, `female`, `unisex`, `kids` |
| `sub_category` | string | `casual-shirt` | `dress-shirt`, `casual-shirt`, `oxford`, `oversized`, `crop-shirt`, `tunic`, `blouse` |
| `material` | string | `default` | `default`, `cotton`, `organic-cotton`, `linen`, `silk`, `rayon`, `polyester`, `oxford`, `poplin`, `flannel`, `cotton-blend` |
| `asset_size` | string | `default` | `default`, `xs`, `s`, `m`, `l`, `xl` |
Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.
| Parameter | Type | Default | Supported IDs |
| -------------- |-------------|---------------------| --------------------------------------------------------------------------------------------------------------------------- |
| `gender` | string | `unisex` | `male`, `female`, `unisex`, `kids` |
| `sub_category` | string | `casual-shirt` | `dress-shirt`, `casual-shirt`, `oxford`, `oversized`, `crop-shirt`, `tunic`, `blouse` |
| `material` | string | `default` | `default`, `cotton`, `organic-cotton`, `linen`, `silk`, `rayon`, `polyester`, `oxford`, `poplin`, `flannel`, `cotton-blend` |
| `asset_size` | string | `default` | `default`, `xs`, `s`, `m`, `l`, `xl` |
Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.
| `gender` | string | `unisex` | `male`, `female`, `unisex`, `kids` |
| `sub_category` | string | `casual-shirt` | `dress-shirt`, `casual-shirt`, `oxford`, `oversized`, `crop-shirt`, `tunic`, `blouse` |
| `material` | string | `default` | `default`, `cotton`, `organic-cotton`, `linen`, `silk`, `rayon`, `polyester`, `oxford`, `poplin`, `flannel`, `cotton-blend` |
| `asset_size` | string | `default` | `default`, `xs`, `s`, `m`, `l`, `xl` |
| `fit` | string | `regular` | `slim`, `regular`, `relaxed`, `oversized` |
| `collar` | string | `point` | `point`, `spread`, `mandarin`, `peter-pan`, `button-down`, `no-collar` |
| `sleeve` | string | `short` | `short`, `long`, `puff`, `bell`, `bishop`, `sleeveless` |
Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.
| `gender` | string | `unisex` | `male`, `female`, `unisex`, `kids` |
| `sub_category` | string | `casual-shirt` | `dress-shirt`, `casual-shirt`, `oxford`, `oversized`, `crop-shirt`, `tunic`, `blouse` |
| `material` | string | `default` | `default`, `cotton`, `organic-cotton`, `linen`, `silk`, `rayon`, `polyester`, `oxford`, `poplin`, `flannel`, `cotton-blend` |
| `asset_size` | string | `default` | `default`, `xs`, `s`, `m`, `l`, `xl` |
| `fit` | string | `regular` | `slim`, `regular`, `relaxed`, `oversized` |
| `collar` | string | `point` | `point`, `spread`, `mandarin`, `peter-pan`, `button-down`, `no-collar` |
| `sleeve` | string | `short` | `short`, `long`, `puff`, `bell`, `bishop`, `sleeveless` |
Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.
| `gender` | string | `unisex` | `male`, `female`, `unisex`, `kids` |
| `sub_category` | string | `casual-shirt` | `dress-shirt`, `casual-shirt`, `oxford`, `oversized`, `crop-shirt`, `tunic`, `blouse` |
| `material` | string | `default` | `default`, `cotton`, `organic-cotton`, `linen`, `silk`, `rayon`, `polyester`, `oxford`, `poplin`, `flannel`, `cotton-blend` |
| `asset_size` | string | `default` | `default`, `xs`, `s`, `m`, `l`, `xl` |
| `fit` | string | `regular` | `slim`, `regular`, `relaxed`, `oversized` |
| `collar` | string | `point` | `point`, `spread`, `mandarin`, `peter-pan`, `button-down`, `no-collar` |
| `sleeve` | string | `short` | `short`, `long`, `puff`, `bell`, `bishop`, `sleeveless` |
Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.
| `gender` | string | `unisex` | `male`, `female`, `unisex`, `kids` |
| `sub_category` | string | `casual-shirt` | `dress-shirt`, `casual-shirt`, `oxford`, `oversized`, `crop-shirt`, `tunic`, `blouse` |
| `material` | string | `default` | `default`, `cotton`, `organic-cotton`, `linen`, `silk`, `rayon`, `polyester`, `oxford`, `poplin`, `flannel`, `cotton-blend` |
| `asset_size` | string | `default` | `default`, `xs`, `s`, `m`, `l`, `xl` |
| `fit` | string | `regular` | `slim`, `regular`, `relaxed`, `oversized` |
| `collar` | string | `point` | `point`, `spread`, `mandarin`, `peter-pan`, `button-down`, `no-collar` |
| `sleeve` | string | `short` | `short`, `long`, `puff`, `bell`, `bishop`, `sleeveless` |
Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.
| `sub_category` | string | `casual-shirt` | `dress-shirt`, `casual-shirt`, `oxford`, `oversized`, `crop-shirt`, `tunic`, `blouse` |
| `material` | string | `default` | `default`, `cotton`, `organic-cotton`, `linen`, `silk`, `rayon`, `polyester`, `oxford`, `poplin`, `flannel`, `cotton-blend` |
| `asset_size` | string | `default` | `default`, `xs`, `s`, `m`, `l`, `xl` |
| `fit` | string | `regular` | `slim`, `regular`, `relaxed`, `oversized` |
| `collar` | string | `point` | `point`, `spread`, `mandarin`, `peter-pan`, `button-down`, `no-collar` |
| `sleeve` | string | `short` | `short`, `long`, `puff`, `bell`, `bishop`, `sleeveless` |
| `closure` | string | `buttons` | `buttons`, `zipper`, `snap`, `tie` |
Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.
| `sub_category` | string | `casual-shirt` | `dress-shirt`, `casual-shirt`, `oxford`, `oversized`, `crop-shirt`, `tunic`, `blouse` |
| `material` | string | `default` | `default`, `cotton`, `organic-cotton`, `linen`, `silk`, `rayon`, `polyester`, `oxford`, `poplin`, `flannel`, `cotton-blend` |
| `asset_size` | string | `default` | `default`, `xs`, `s`, `m`, `l`, `xl` |
| `fit` | string | `regular` | `slim`, `regular`, `relaxed`, `oversized` |
| `collar` | string | `point` | `point`, `spread`, `mandarin`, `peter-pan`, `button-down`, `no-collar` |
| `sleeve` | string | `short` | `short`, `long`, `puff`, `bell`, `bishop`, `sleeveless` |
| `closure` | string | `buttons` | `buttons`, `zipper`, `snap`, `tie` |
Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.
| `sub_category` | string | `casual-shirt` | `dress-shirt`, `casual-shirt`, `oxford`, `oversized`, `crop-shirt`, `tunic`, `blouse` |
| `material` | string | `default` | `default`, `cotton`, `organic-cotton`, `linen`, `silk`, `rayon`, `polyester`, `oxford`, `poplin`, `flannel`, `cotton-blend` |
| `asset_size` | string | `default` | `default`, `xs`, `s`, `m`, `l`, `xl` |
| `fit` | string | `regular` | `slim`, `regular`, `relaxed`, `oversized` |
| `collar` | string | `point` | `point`, `spread`, `mandarin`, `peter-pan`, `button-down`, `no-collar` |
| `sleeve` | string | `short` | `short`, `long`, `puff`, `bell`, `bishop`, `sleeveless` |
| `closure` | string | `buttons` | `buttons`, `zipper`, `snap`, `tie` |
Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.
| `collar` | string | `point` | `point`, `spread`, `mandarin`, `peter-pan`, `button-down`, `no-collar` |
| `sleeve` | string | `short` | `short`, `long`, `puff`, `bell`, `bishop`, `sleeveless` |
| `closure` | string | `buttons` | `buttons`, `zipper`, `snap`, `tie` |
| `pocket` | string | `none` | `none`, `chest`, `double` |
| `cuff` | string | `standard` | `standard`, `button`, `french` |
| `colors` | object | — | Garment colors; existing nested state structure |
| `print_text` | string | `"Craftsman Agent"` | Global/legacy print text |
No suspicious patterns detected.