Security audit
Security checks for vulnerabilities and agentic risk
The skill clearly describes a user-directed connection to dLazy’s paid image-generation service, including authentication and data uploads.
Use this skill if you trust dLazy to process your prompts and any media you supply. Generation consumes service credits, and login stores an API key locally. Keep the pinned CLI version and revoke the key from the dashboard when access is no longer needed.
Authentication could support an image-generation workflow, but it is the only behavior supplied here. The chunk does not implement or invoke generation or any declared generation options, so its primary behavior materially differs from the description. There is no evidence in this chunk of credential exfiltration or other malicious activity.
Authentication could support an image-generation workflow, but the supplied code consists solely of a login command and shows no connection to the advertised generation functionality. This assessment is limited to the supplied chunk; it does not imply credential theft or other unseen behavior.
Authentication could support an image-generation workflow, but the supplied code consists solely of a login command and does not implement the declared functionality. This assessment is limited to the supplied chunk; it does not establish credential theft or other malicious behavior.
Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.
## 错误处理
| Code | 错误类型 | 示例信息 |
| ---- | -------------------------------- | ------------------------------------------------------------------------------------------------------------------------ |
| 401 | 未授权 (API Key缺失或无效) | `ok: false, code: "unauthorized", message: "API key is missing or invalid"` |
| 501 | 缺少必填参数 | `error: required option '--prompt <prompt>' not specified` |
No suspicious patterns detected.