Security audit
Security checks across malware telemetry and agentic risk
This skill mostly does what it claims, but it also allows broader BizyAir workflow execution and includes unrelated image-angle tooling that users should review before installing.
Install only if you are comfortable sending prompts, image URLs, task IDs, and generated output links to BizyAir using your API key. Use a dedicated revocable key if possible, avoid private/internal media URLs, and do not use custom web_app_id workflows or the bundled bozo-jiaodu scripts unless you have independently verified what those BizyAir workflows do.
2. 使用 `curl` 执行以下 POST 请求：
```bash
curl -s -X POST "https://api.bizyair.cn/w/v1/webapp/task/openapi/create" \
-H "Content-Type: application/json" \
-H "Authorization: Bearer ${BIZYAIR_API_KEY}" \
-H "X-Bizyair-Task-Async: enable" \2. 使用 `curl` 执行以下 POST 请求：
```bash
curl -s -X POST "https://api.bizyair.cn/w/v1/webapp/task/openapi/create" \
-H "Content-Type: application/json" \
-H "Authorization: Bearer ${BIZYAIR_API_KEY}" \
-H "X-Bizyair-Task-Async: enable" \1. 使用 `curl` 执行查询：
```bash
curl -s -X GET "https://api.bizyair.cn/w/v1/webapp/task/openapi/outputs?requestId=<对应的requestId>" \
-H "Authorization: Bearer ${BIZYAIR_API_KEY}"
```echo "🔧 工作流 ID: ${WEB_APP_ID}"
echo ""
RESPONSE=$(curl -s -X POST "https://api.bizyair.cn/w/v1/webapp/task/openapi/create" \
-H "Content-Type: application/json" \
-H "Authorization: Bearer ${BIZYAIR_API_KEY}" \
-H "X-Bizyair-Task-Async: enable" \echo "🔧 工作流 ID: ${WEB_APP_ID}"
echo ""
RESPONSE=$(curl -s -X POST "https://api.bizyair.cn/w/v1/webapp/task/openapi/create" \
-H "Content-Type: application/json" \
-H "Authorization: Bearer ${BIZYAIR_API_KEY}" \
-H "X-Bizyair-Task-Async: enable" \65/65 vendors flagged this skill as clean.
No suspicious patterns detected.