Security audit
Security checks for vulnerabilities and agentic risk
The skill openly describes login, media uploads, and paid video generation that fit its stated purpose.
Use media you are comfortable uploading to dLazy and account for generation charges. Review the pinned third-party CLI before installing, prefer device login over pasting keys into commands, and revoke stored keys when no longer needed.
The supplied code only invokes a login command and contains no Kling model invocation, multimodal input handling, or video generation. Authentication could support a larger workflow, but no such connection is demonstrated here. This assessment does not imply credential theft or other unobserved behavior.
Authentication setup could legitimately support video generation and is not inherently an undeclared capability. However, it is the entire supplied implementation: there is no Kling invocation, input processing, or video-generation request. The code therefore does not implement the declared primary purpose.
The entire supplied chunk is an authentication command; it contains no video-generation invocation or handling of image or prompt inputs. Authentication could support a larger generation workflow, but no such connection is established in the supplied code. There is no evidence that login succeeds or that credentials are accessed.
Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.
## 错误处理
| Code | 错误类型 | 示例信息 |
| ---- | -------------------------------- | ------------------------------------------------------------------------------------------------------------------------ |
| 401 | 未授权 (API Key缺失或无效) | `ok: false, code: "unauthorized", message: "API key is missing or invalid"` |
| 501 | 缺少必填参数 | `error: required option '--prompt <prompt>' not specified` |
No suspicious patterns detected.