Security audit
WaveSpeedAI Wan 2.6 Video Generation
Security checks across malware telemetry and agentic risk
Overview
This is a documentation-only skill for using WaveSpeed AI video generation, with disclosed API-key use and user-selected media uploads.
Install if you are comfortable using WaveSpeed for video generation. Use a revocable API key stored outside source control, expect prompts and selected media to be sent to WaveSpeed, and avoid uploading sensitive images or audio unless that is intended.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
66/66 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.