Security audit
Dlazy Image Replicate
Security checks across malware telemetry and agentic risk
Overview
This skill is a disclosed cloud image-replication wrapper that installs a pinned third-party CLI, uses a dLazy API key, and uploads only user-supplied media for generation.
Before installing, confirm you are comfortable using a third-party dLazy CLI and cloud service. Media files you pass to the command may be uploaded to dLazy storage, generated outputs are hosted by dLazy, and an API key may be saved locally unless you use an environment variable instead.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
64/64 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.