ClawHub
Back to skill

Security audit

Poyo Image Translator

Security checks for vulnerabilities and agentic risk

Overview

This skill is a straightforward PoYo image-translation helper that discloses its API use and requires explicit user direction before live submission.

Install only if you intend to use PoYo for image translation. Keep POYO_API_KEY server-side, review payloads before submission, avoid sending private image URLs unless allowed by your policy, and do not log API keys, raw authorization headers, task IDs, callback URLs, or generated output URLs unnecessarily.

SkillSpector

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Static analysis

No suspicious patterns detected.