ClawHub
Back to skill

Security audit

Poyo Sora 2

Security checks across malware telemetry and agentic risk

Overview

This skill is a straightforward PoYo AI video-generation helper, with expected external API use and no evidence of hidden persistence, destructive actions, or unrelated data access.

Install only if you are comfortable sending generation prompts, optional image URLs, callback URLs, and your PoYo API-authenticated request to PoYo AI. Avoid submitting sensitive images or confidential prompts unless you trust PoYo’s handling of that data, and prefer keeping POYO_API_KEY in the environment rather than passing it directly on the command line.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (3)

Missing User Warnings

Medium
Confidence
91% confidence
Finding
The skill instructs authenticated submission of prompts and potentially image URLs to a third-party API without warning the user that their content will leave the local environment. This can lead to unintended disclosure of sensitive prompts, proprietary images, or personal data, especially because the workflow normalizes direct remote submission as the default behavior.

External Transmission

Medium
Category
Data Exfiltration
Content
---
name: poyo-sora-2
description: Use PoYo AI's Sora 2 video generation models through the `https://api.poyo.ai/api/generate/submit` endpoint. Use when a user wants to generate videos, submit Sora 2 jobs, create text-to-video or image-to-video payloads, poll task status, or prepare PoYo-compatible requests for `sora-2` or `sora-2-private`.
metadata: {"openclaw":{"homepage":"https://poyo.ai/models/sora-2","requires":{"bins":["curl"],"env":["POYO_API_KEY"]},"primaryEnv":"POYO_API_KEY"}}
---
Confidence
88% confidence
Finding
The skill is explicitly designed to transmit data to an external service and use a bearer-authenticated API key. External transmission is contextually expected here, but it still creates real security and privacy risk because user-supplied prompts, image references, and authentication material are involved and could expose sensitive information to a third party.

External Transmission

Medium
Category
Data Exfiltration
Content
- `sora-2` for standard Sora 2 generation
   - `sora-2-private` for the private standard-quality variant
2. Build the request body.
3. Submit a POST request to `https://api.poyo.ai/api/generate/submit` with Bearer auth.
4. Save the returned `task_id`.
5. Poll unified task status until the job finishes, or rely on `callback_url` if the user has a webhook.
Confidence
90% confidence
Finding
This step operationally instructs the agent to POST data to `https://api.poyo.ai/api/generate/submit` with bearer authentication, which is a real external data transfer action rather than a mere reference. In this context, the danger is not that external transmission exists at all, but that the skill does not pair it with safeguards around consent, data sensitivity, or secret handling.

VirusTotal

63/63 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.