Security audit
Security checks for vulnerabilities and agentic risk
This skill coherently documents a hosted document-to-video workflow, including its uploads, login requirements, and saved project sessions.
Prompts and attached documents leave your device for dLazy processing, and generation can consume credits. Review the service's privacy and retention terms, choose the intended organization and project, and upload only documents you are authorized to share. Login saves an organization API key locally; revoke it when no longer needed.
The supplied code only lists organization projects; it does not process documents or perform any video-production step. No context connects project enumeration to the declared workflow, so the demonstrated behavior accesses an unrelated resource and materially differs from the stated purpose.
The supplied code only lists organizational projects. It performs no document parsing or video-production steps, and the chunk provides no connection establishing project enumeration as a supporting implementation detail of the declared workflow.
The only supplied command performs login rather than the declared conversion workflow. Authentication could support a broader implementation, but the provided chunk neither establishes that connection nor performs any of the described operations. The command alone does not establish credential theft or other malicious behavior.
The supplied chunk only invokes a login command; it performs no visible document processing or video production. Authentication could support a larger workflow, but the supplied content establishes no connection between dlazy login and the declared document-to-video purpose. The command's implementation and any credential or network access are not shown.
Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.
## 错误处理
| Code | 错误类型 | 示例信息 |
| ---- | -------------------------------- | ------------------------------------------------------------------------------------------------------------------------ |
| 401 | 未授权 (API Key缺失或无效) | `ok: false, code: "unauthorized", message: "API key is missing or invalid"` |
| 501 | 缺少必填参数 | `error: required option '--prompt <prompt>' not specified` |
No suspicious patterns detected.