Security audit

Chanjing Text To Digital Person

Security checks across malware telemetry and agentic risk

Overview

This skill is a coherent Chanjing API helper, with disclosed credential storage and explicit-only downloads that users should handle carefully.

Install this only if you intend to use Chanjing's API with your own credentials. Protect ~/.chanjing/credentials.json, keep CHANJING_OPENAPI_BASE_URL pointed at the official or another trusted endpoint, and only run downloads for expected Chanjing-generated media into a safe output directory.

SkillSpector

By NVIDIA

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (2)

Missing User Warnings

Medium

Confidence: 93% confidence
Finding: The documentation explicitly demonstrates downloading a remote URL to the local machine without any warning, trust guidance, or validation constraints. In an agent context, this can normalize writing attacker-controlled content to disk and increase the risk of unsafe file retrieval, phishing payload delivery, or abuse of local storage when a user asks to download generated results.

Missing User Warnings

Medium

Confidence: 85% confidence
Finding: The function writes sensitive authentication material, including access tokens and potentially app_id/secret_key-bearing config content, to a local JSON file without setting restrictive file permissions or warning the user. On multi-user systems or permissive umask configurations, this can expose credentials to other local users or backup/sync tools.

VirusTotal

66/66 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.