Security audit
Security checks for vulnerabilities and agentic risk
The skill coherently uses dLazy’s hosted service to create slideshow videos and clearly discloses authentication, file uploads, and saved sessions.
Install only if you accept sending selected documents and prompts to dLazy and using service credits. Prefer device login, protect the saved organization API key, and choose the intended project when continuing work.
The supplied command enumerates organization projects and contains no slideshow creation, document conversion, narration, or video generation behavior. No connection is shown that would establish project listing as a supporting step for the declared purpose.
The supplied code performs organizational project discovery rather than creating a slideshow video. No video generation, narration, or transition functionality appears in the chunk, and listing organization projects is not explained as a supporting step for the declared purpose.
The only supplied command initiates login, and nothing in the chunk connects that authentication step to slideshow creation. Authentication could support a larger workflow, but no such workflow is present in the supplied code. The command's underlying credential handling and network behavior cannot be determined from this snippet.
The supplied chunk only initiates a login operation; it contains no slideshow processing, narration, transitions, or video generation. Authentication could support a larger workflow, but the supplied material does not establish that connection. The command alone does not reveal what credentials or resources may be accessed.
Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.
## 错误处理
| Code | 错误类型 | 示例信息 |
| ---- | -------------------------------- | ------------------------------------------------------------------------------------------------------------------------ |
| 401 | 未授权 (API Key缺失或无效) | `ok: false, code: "unauthorized", message: "API key is missing or invalid"` |
| 501 | 缺少必填参数 | `error: required option '--prompt <prompt>' not specified` |
No suspicious patterns detected.