Dlazy Gpt Image 2
Security checks across malware telemetry and agentic risk
Overview
This is a disclosed cloud image-generation skill that uses the dLazy CLI and API key, with no artifact evidence of hidden or malicious behavior.
Before installing, understand that prompts and any image files you explicitly pass will be sent to dLazy's hosted service, generated files are hosted by dLazy, and your API key may be saved locally. Prefer `npx` for one-off use if you do not want a persistent global CLI, and review the dLazy CLI source because the install command currently tracks `@latest` rather than a fixed version.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
60/60 vendors flagged this skill as clean.
