Security audit
Poyo Wan 2 7 Video
Security checks for vulnerabilities and agentic risk
Overview
This is a small, clearly scoped PoYo video-generation API helper that requires a PoYo API key but does not show hidden, persistent, or destructive behavior.
Install only if you intend to use PoYo’s Wan 2.7 video API. Keep POYO_API_KEY in a server-side environment or secret manager, review payloads before submission, and avoid sending confidential prompts, private media URLs, or sensitive callback URLs unless you trust PoYo and the callback receiver.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.