Security audit
Poyo Kling O1 Image
Security checks across malware telemetry and agentic risk
Overview
This skill is a straightforward PoYo image-editing helper that submits user-prepared requests to the documented PoYo API using a user-provided API key.
Install only if you intend to use PoYo’s Kling O1 image API. Keep POYO_API_KEY server-side, review payloads before submission, and avoid sending confidential prompts, private image URLs, callback URLs, or generated image URLs unless you trust PoYo and the callback endpoint.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
64/64 vendors flagged this skill as clean.