Back to skill

Security audit

Poyo Grok Imagine Video 1 5

Security checks for vulnerabilities and agentic risk

Overview

This skill is a narrowly scoped PoYo API helper that discloses its API-key use, external submission flow, and privacy cautions.

Install only if you intend to use PoYo for this model. Keep POYO_API_KEY in a server-side environment, expect prompts and image URLs to be sent to PoYo when you submit a job, and avoid confidential images, private prompts, or sensitive callback URLs unless you trust that service and receiver.

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Static analysis

No suspicious patterns detected.