Security audit
Poyo Gemini 3 5 Flash
Security checks for vulnerabilities and agentic risk
Overview
This skill is a straightforward PoYo API helper that discloses its API key and curl requirements and does not show hidden or destructive behavior.
Install only if you intend to use PoYo for Gemini 3.5 Flash. Keep POYO_API_KEY in a server-side environment or secret manager, review payload files before running the helper, and avoid sending prompts, media, or other private data unless that data is allowed to leave your environment.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.