Security audit
Security checks for vulnerabilities and agentic risk
The skill coherently supports cloud video generation and clearly discloses its media uploads, authentication, and installation requirements.
Use media you are comfortable uploading to dLazy and consider generation costs. Review the separately installed CLI, protect your API key, and use the documented dry-run option to preview requests.
Authentication could be a supporting implementation detail, but the supplied code provides no connection between dlazy login and Jimeng Dream Actor and implements none of the declared conversion workflow. The assessment is limited to this chunk; its authentication mechanism and any subsequent behavior are not shown.
The supplied code contains only a login command, with no image handling, video generation, or demonstrated connection to Jimeng Dream Actor. Authentication could support the declared workflow, but the supplied chunk provides no evidence of that relationship or implements the described conversion.
Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.
## 错误处理
| Code | 错误类型 | 示例信息 |
| ---- | -------------------------------- | ------------------------------------------------------------------------------------------------------------------------ |
| 401 | 未授权 (API Key缺失或无效) | `ok: false, code: "unauthorized", message: "API key is missing or invalid"` |
| 501 | 缺少必填参数 | `error: required option '--prompt <prompt>' not specified` |
No suspicious patterns detected.