Security audit
多商品批量生图 Batch Image
Security checks across malware telemetry and agentic risk
Overview
This skill is a disclosed batch image-generation workflow that uses the dLazy CLI and cloud API for its stated purpose.
Before installing, users should understand that product images, prompts, and generated assets are handled by dLazy's cloud service, and that using login or auth set stores an API key locally. Review the pinned @dlazy/cli package and use dry-run/sample batches first to control cost before running large SKU batches.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
64/64 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.