Security audit
Security checks for vulnerabilities and agentic risk
ClawScan’s verdict is benign: the results describe a video-generation skill with no AIG findings, while noting a mismatch between its stated 2K limit and advertised 4K output; coverage is incomplete because some referenced files or resources were missing.
The verdict is benign, but confidence is medium and the scan is marked partial. Before installing, consider that the documented resolution limit may not match the CLI help, and that the referenced CLI package and other missing resources were not inspected.
The primary purpose and generation modes align with the description, but the explicit 4K resolution option contradicts its stated 2K limit. The other CLI options are supporting implementation details. This chunk is help text rather than an implementation, so actual API behavior and native stereo output cannot be verified.
The generation modes, reference assets, and durations align with the declared purpose. However, the resolution choices explicitly include 4K, contradicting the stated 2K ceiling. Async execution and result downloads are supporting implementation details, not separate mismatches. Only CLI help is supplied, so actual runtime support and native stereo audio cannot be verified.
The supplied chunk only executes a login command and does not reference MiniMax Hailuo or implement any declared video features. Authentication could support a broader workflow, but nothing in the supplied code establishes that connection. No credential theft or additional behavior can be inferred from this command alone.
The supplied code performs a login operation rather than the advertised video-generation tasks. Authentication could be a supporting implementation detail if connected to the declared service, but no such connection is established in this chunk.
Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.
## 错误处理
| Code | 错误类型 | 示例信息 |
| ---- | -------------------------------- | ------------------------------------------------------------------------------------------------------------------------ |
| 401 | 未授权 (API Key缺失或无效) | `ok: false, code: "unauthorized", message: "API key is missing or invalid"` |
| 501 | 缺少必填参数 | `error: required option '--prompt <prompt>' not specified` |