ClawHub
Back to skill

Security audit

Poyo Kling O1 Image

Security checks for vulnerabilities and agentic risk

Overview

This is a straightforward PoYo image-editing API helper that clearly discloses its API key and network submission behavior.

Install this only if you intend to use PoYo for image editing. Keep POYO_API_KEY in a server-side environment or secret manager, review payload JSON before running the submit script, and avoid sending confidential prompts, private image URLs, generated image URLs, or callback URLs unless you trust PoYo and the callback receiver.

SkillSpector

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Static analysis

No suspicious patterns detected.