Security audit
Security checks for vulnerabilities and agentic risk
ClawScan rates this skill benign with medium confidence: scanners report no executable scripts, but Skillspector flags a mismatch between the advertised video-generation purpose and the authentication commands it found, and coverage is partial.
Before installing, consider whether you are comfortable installing the pinned CLI and providing it an API key. The scan found a gap between the advertised video-generation purpose and the authentication behavior it could confirm, and some referenced material was unavailable for review.
Authentication could support a video-generation integration, but the supplied chunk provides no evidence connecting this login command to the described model or capabilities. As supplied, its sole behavior is login, which materially differs from the declared purpose. The command alone does not establish credential theft or other malicious activity.
The supplied code only invokes a login command rather than implementing or invoking the described video model. Authentication could be a supporting implementation detail, but this chunk provides no evidence connecting dlazy login to the declared service. The command's internal behavior and any credential access cannot be determined from the supplied code.
Authentication can be a supporting implementation detail, but this chunk contains only a credential-configuration command and establishes no connection to the described video model. It neither invokes video generation nor implements the advertised controls. There is no evidence of credential exfiltration or other hidden behavior.
Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.
## 错误处理
| Code | 错误类型 | 示例信息 |
| ---- | -------------------------------- | ------------------------------------------------------------------------------------------------------------------------ |
| 401 | 未授权 (API Key缺失或无效) | `ok: false, code: "unauthorized", message: "API key is missing or invalid"` |
| 501 | 缺少必填参数 | `error: required option '--prompt <prompt>' not specified` |