Security audit
Security checks for vulnerabilities and agentic risk
The skill coherently documents image generation through dLazy, including authentication, cloud uploads, and local API-key storage.
Use this skill if you are comfortable sending your prompts and selected images to dLazy and spending service credits. Keep your API key private, review the external CLI before installation, and use the documented dashboard to revoke the key when needed.
The supplied code only invokes a login command; it contains no image-generation or editing operation. Authentication could be a supporting implementation detail, but this chunk provides no evidence connecting dlazy login to Nano Banana Pro or the declared workflows.
The supplied code performs only a login operation rather than the declared image workflow. Authentication could be a supporting implementation detail, but nothing in the supplied material establishes that this command supports Nano Banana Pro. The command alone does not establish credential theft or data exfiltration.
Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.
## 错误处理
| Code | 错误类型 | 示例信息 |
| ---- | -------------------------------- | ------------------------------------------------------------------------------------------------------------------------ |
| 401 | 未授权 (API Key缺失或无效) | `ok: false, code: "unauthorized", message: "API key is missing or invalid"` |
| 501 | 缺少必填参数 | `error: required option '--prompt <prompt>' not specified` |
No suspicious patterns detected.