Security audit
Security checks for vulnerabilities and agentic risk
This image-generation skill clearly discloses its cloud uploads, API-key storage, and installation requirements, with no material harmful behavior found.
Use this skill if you are comfortable sending prompts and selected media to dLazy and spending service credits. Keep sensitive files out of generation inputs, protect your API key, and use the pinned installation command.
The code generates images as declared, and super-resolution can reasonably support that purpose. However, video generation and speech narration are materially distinct, undeclared capabilities. The supplied commands also do not implement the advertised automatic selection of an image model based on the prompt.
The supplied commands extend beyond the declared image-generation purpose by generating video and speech. Image upscaling can reasonably support image generation and is not independently flagged. The chunk also hardcodes seedream-4.5 rather than demonstrating the advertised automatic model selection.
Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.
## 错误处理
| Code | 错误类型 | 示例信息 |
| ---- | -------------------------------- | ------------------------------------------------------------------------------------------------------------------------ |
| 401 | 未授权 (API Key缺失或无效) | `ok: false, code: "unauthorized", message: "API key is missing or invalid"` |
| 501 | 缺少必填参数 | `error: required option '--prompt <prompt>' not specified` |
No suspicious patterns detected.