Security audit
Security checks for vulnerabilities and agentic risk
The skill clearly discloses a purpose-aligned cloud voice-cloning workflow, including authentication, audio uploads, and saved credentials.
Use recordings you have permission to clone. Selected audio and text are sent to dLazy, generation uses service credits, and login saves an API key locally. Consider the service’s privacy terms before uploading sensitive recordings.
The supplied chunk performs only a login operation rather than the advertised audio workflow. Authentication could be a supporting implementation detail, but nothing in this chunk establishes that dlazy login supports Vidu Audio Clone. No credential theft or other hidden behavior can be inferred from this command alone.
Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.
## 错误处理
| Code | 错误类型 | 示例信息 |
| ---- | -------------------------------- | ------------------------------------------------------------------------------------------------------------------------ |
| 401 | 未授权 (API Key缺失或无效) | `ok: false, code: "unauthorized", message: "API key is missing or invalid"` |
| 501 | 缺少必填参数 | `error: required option '--prompt <prompt>' not specified` |
No suspicious patterns detected.