Reve AI Image Generation

• Outcome: Pass
• Latest audit: May 27, 2026, 9:12 PM
• Version:
  1.0.2

Overview

This skill appears to do what it says: use a Reve API key to generate, edit, or remix images through Reve's API.

Install this only if you intend to use Reve AI. Use a dedicated, revocable Reve API key, expect API credit usage, and only provide input images you are comfortable sending to Reve for processing.

SkillSpector

By NVIDIA

Vulnerability Patterns

• MCP Least Privilege: Underdeclared Capability, Wildcard Permission, Missing Permission Declaration
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Lp3

Medium

• Category: MCP Least Privilege
• Confidence: 90% confidence
• Finding: The skill documentation indicates it uses environment variables for API keys and makes outbound network requests, but it does not declare corresponding permissions. Undeclared env and network capabilities reduce transparency and can bypass user or platform expectations about what the skill can access, especially since API-bearing environment variables are involved.

VirusTotal

64/64 vendors flagged this skill as clean.