Security audit
Security checks for vulnerabilities and agentic risk
ClawScan rates this skill benign with medium confidence; the scanned Markdown has no AIG findings, while Skillspector flagged a CLI authentication step and whitespace padding, and its review was partial.
The verdict is benign, but confidence is medium and the scan was partial: some CLI and service references were unavailable for inspection. Before installing, consider whether you are comfortable with the CLI login and its stated use of an API key; the scan does not establish that the login step connects to the advertised image features.
The supplied code only initiates login through an otherwise unexplained CLI. Authentication could support a larger image workflow, but no connection to the declared image service or functionality is established in this chunk. Its demonstrated behavior therefore materially differs from the declared purpose.
The supplied chunk only initiates a login workflow and contains no image-generation or editing behavior. Authentication could support an image service, but the supplied code establishes no such connection. Its visible purpose therefore differs materially from the declared purpose.
Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.
## 错误处理
| Code | 错误类型 | 示例信息 |
| ---- | -------------------------------- | ------------------------------------------------------------------------------------------------------------------------ |
| 401 | 未授权 (API Key缺失或无效) | `ok: false, code: "unauthorized", message: "API key is missing or invalid"` |
| 501 | 缺少必填参数 | `error: required option '--prompt <prompt>' not specified` |