文本生成 Claude Sonnet 5

• Outcome: Review
• Latest audit: Sep 4, 2026 · 2:19 AM UTC
• Version: 1.2.14

Overview

The skill mostly does what it says, but it should be reviewed because it stores a dLazy API key locally while overstating the inspected CLI's file-permission protection.

Review this before installing if the dLazy API key has meaningful account value. Prefer per-invocation DLAZY_API_KEY or a private config directory with restrictive permissions, and only pass prompts or media files you are comfortable sending to dLazy's hosted service.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• MCP Tool Poisoning: Hidden Instructions, Unicode Deception, Parameter Description Injection
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (6)

Ae1

High

• Category: analysis-evasion

Content

[English](./SKILL.md) · [中文](./SKILL-cn.md)

• Confidence: 100% confidence
• Finding: Referenced artifact was not completely inspected

Intent-Code Divergence

Medium

• Confidence: 94% confidence
• Finding: The documentation explicitly claims the skill will not access the network or file system, but the same file documents behavior that uploads local media paths to remote endpoints and can save outputs to local disk. This kind of misleading trust signal can cause users or agents to disclose sensitive local files or approve execution under false assumptions about data handling.

Natural-Language Policy Violations

Medium

• Confidence: 90% confidence
• Finding: The file presents a critical agent instruction in Chinese and directs execution behavior without offering any language or locale choice. Under the policy, forcing a specific language is a natural-language policy violation unless the skill explicitly provides opt-in or a justified locale restriction.

Whitespace Padding

Medium

• Category: Prompt Injection

Content

## 错误处理

| Code | 错误类型                         | 示例信息                                                                                                                 |
| ---- | -------------------------------- | ------------------------------------------------------------------------------------------------------------------------ |
| 401  | 未授权 (API Key缺失或无效)       | `ok: false, code: "unauthorized", message: "API key is missing or invalid"`                                                              |
| 501  | 缺少必填参数                     | `error: required option '--prompt <prompt>' not specified`                                                               |

• Confidence: 70% confidence
• Finding: Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.

Natural-Language Policy Violations

Medium

• Confidence: 88% confidence
• Finding: The primary title is presented in Chinese and the file links to an English version, but the skill text does not state that language choice depends on user preference or consent. This can violate language/locale policy expectations when a skill appears to impose a locale by default rather than asking or honoring the user's preference.

Whitespace Padding

Medium

• Category: Prompt Injection

Content

## Error Handling

| Code | Error Type                         | Example Message                                                                                                          |
| ---- | ---------------------------------- | ------------------------------------------------------------------------------------------------------------------------ |
| 401  | Unauthorized (No API Key)          | `ok: false, code: "unauthorized", message: "API key is missing or invalid"`                                                              |
| 501  | Missing required parameter         | `error: required option '--prompt <prompt>' not specified`                                                              |

• Confidence: 70% confidence
• Finding: Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.

VirusTotal

61/61 vendors flagged this skill as clean.

Static analysis

No suspicious patterns detected.