Security audit
Dlazy Image Social Carousel
Security checks across malware telemetry and agentic risk
Overview
This skill is a disclosed workflow for generating social-media carousel images through the dLazy CLI and hosted API.
Before installing, review the dLazy CLI source if needed, understand that generated prompts and provided media can be sent to dLazy's API and file service, and use key rotation or the DLAZY_API_KEY environment variable if you do not want a persistent local key.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
64/64 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.