Security audit

对口型 HeyGen Lipsync Speed

Security checks for vulnerabilities and agentic risk

Overview

This skill is a disclosed wrapper for a hosted dLazy lip-sync API, with some documentation mistakes but no artifact-backed evidence of hidden or malicious behavior.

Review the dLazy CLI package/source before installing, use the npx option if you do not want a persistent global binary, and only pass media files you are comfortable uploading to dLazy. Expect possible usage friction because the docs contain inconsistent examples around --prompt and output type.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (7)

Ae1

High

Category: analysis-evasion
Confidence: 100% confidence
Finding: Referenced artifact was not completely inspected
Content: Scanner excerpt · SKILL.md (reported line 10)May include surrounding context.
md
[English](./SKILL.md) · [中文](./SKILL-cn.md)

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 87% confidence
Finding: The file contains agent instructions and operational guidance exclusively in Chinese, including critical execution and error-handling directives. Under the policy, forcing a specific language without user opt-in is a natural-language policy concern unless a locale-specific constraint is clearly documented and justified.
Content: No source excerpt is available for this finding.

Intent-Code Divergence

Medium

Category: Not specified by scanner
Confidence: 98% confidence
Finding: The documented options for dlazy heygen-lipsync-speed do not include any --prompt argument, but later sections instruct users to call the command with --prompt and list --prompt as a required-option error. This is an active contradiction in the skill documentation and suggests the file was copied from a different model or command shape.
Content: No source excerpt is available for this finding.

Whitespace Padding

Medium

Category: Prompt Injection
Confidence: 70% confidence
Finding: Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.
Content: Scanner excerpt · SKILL-cn.md (reported line 129)May include surrounding context.
md
## 错误处理 | Code | 错误类型 | 示例信息 | | ---- | -------------------------------- | ------------------------------------------------------------------------------------------------------------------------ | | 401 | 未授权 (API Key缺失或无效) | `ok: false, code: "unauthorized", message: "API key is missing or invalid"` | | 501 | 缺少必填参数 | `error: required option '--prompt <prompt>' not specified` |

Whitespace Padding

Medium

Category: Prompt Injection
Confidence: 70% confidence
Finding: Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.
Content: Scanner excerpt · SKILL.md (reported line 129)May include surrounding context.
md
## Error Handling | Code | Error Type | Example Message | | ---- | ---------------------------------- | ------------------------------------------------------------------------------------------------------------------------ | | 401 | Unauthorized (No API Key) | `ok: false, code: "unauthorized", message: "API key is missing or invalid"` | | 501 | Missing required parameter | `error: required option '--prompt <prompt>' not specified` |

Intent-Code Divergence

Low

Category: Not specified by scanner
Confidence: 95% confidence
Finding: This skill is described throughout the manifest as a HeyGen lip-sync model that operates on video and audio inputs, which strongly implies a synchronized video result. However, the sample JSON output documents an image output with image/png, actively conflicting with the stated function of the skill and likely misleading integrators about what the command actually returns.
Content: No source excerpt is available for this finding.

Intent-Code Divergence

Low

Category: Not specified by scanner
Confidence: 91% confidence
Finding: The documented options for dlazy heygen-lipsync-speed list media-related parameters such as --video_url and --audio_url, but the example invocation uses --prompt and the error table says --prompt is required. This actively conflicts with the command documentation and misstates how the skill is intended to be used.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.