Security audit
Security checks for vulnerabilities and agentic risk
The skill coherently describes a hosted video-generation service and discloses its file uploads, authentication, and saved project sessions.
Use product material you are comfortable uploading to dLazy, choose the intended organization project, and account for generation credits. Protect the saved organization API key. The pinned external CLI and hosted service were not independently audited in this artifact review.
The supplied command retrieves an organization project listing rather than generating or editing product videos. No connection is shown that would establish project enumeration as a supporting step for the declared purpose.
The supplied chunk only lists organizational projects; it does not process product inputs or generate videos. No connection is shown that would establish project enumeration as a supporting implementation detail of the declared purpose.
Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.
## 错误处理
| Code | 错误类型 | 示例信息 |
| ---- | -------------------------------- | ------------------------------------------------------------------------------------------------------------------------ |
| 401 | 未授权 (API Key缺失或无效) | `ok: false, code: "unauthorized", message: "API key is missing or invalid"` |
| 501 | 缺少必填参数 | `error: required option '--prompt <prompt>' not specified` |
No suspicious patterns detected.