ClawHub
Back to skill

Security audit

Poyo Seedream 4

Security checks across malware telemetry and agentic risk

Overview

This skill is a straightforward PoYo Seedream 4 API helper that discloses its API-key and network use and requires user confirmation before live calls.

Before installing, understand that using this skill can spend PoYo credits and send prompts, image URLs, callback URLs, and related task data to PoYo. Keep POYO_API_KEY server-side and only run the helper script with payloads you have reviewed.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.