Security audit
Poyo Kling 2 1
Security checks for vulnerabilities and agentic risk
Overview
This skill is a straightforward PoYo Kling video-generation helper that discloses its API use and does not show hidden, persistent, or destructive behavior.
Before installing, understand that using this skill can submit prompts, image URLs, callback URLs, and generated media workflow data to PoYo. Keep POYO_API_KEY server-side, do not paste it into chat or logs, and only submit private media if you trust PoYo and the callback endpoint.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.