ClawHub
Back to skill

Security audit

卡咔 AI 图文生成

Security checks for vulnerabilities and agentic risk

Overview

This skill is a coherent Cardcrafter integration that uses a user-provided API key to send requested content to Cardcrafter for image and card generation.

Install only if you are comfortable sending the content you ask it to generate or transform to Cardcrafter's service. Store KAKA_API_KEY as a secret, do not paste it into prompts or commit it to repositories, and avoid submitting regulated, confidential, or highly sensitive material unless Cardcrafter's handling policies meet your needs.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (7)

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
96% confidence
Finding

The README instructs users to create and export a long-lived API key but does not warn that the key is sensitive, should not be committed, logged, or shared, and is only shown once. In an agent/plugin context, this increases the chance of accidental credential exposure through shell history, screenshots, misconfigured environments, or repository files, which could allow unauthorized use of the remote service.

Content

No source excerpt is available for this finding.

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
96% confidence
Finding

The skill clearly instructs the agent to send user prompts, text, image URLs, and generated content to Cardcrafter's remote MCP/REST endpoints, but it does not prominently warn users that their content will be transmitted to a third-party service. This creates a privacy and consent issue: users may unknowingly provide sensitive business, personal, or regulated content to an external provider.

Content

No source excerpt is available for this finding.

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · README.md (reported line 37)May include surrounding context.

md
## 工具面：优先远程 MCP

若环境已连接卡咔远程 MCP（WorkBuddy：插件 → MCP 服务器 → 配置 MCP，端点 `https://api.cardcrafter.cn/mcp`，鉴权 `Authorization: Bearer $KAKA_API_KEY`），**直接用 MCP 工具**：get_me / list_styles / generate_viral_outline / generate_viral_images / generate_cover / generate_card / get_record 等 12 个，与下文 REST 端点一一对应，跳过 curl 写法。

未连接 MCP 时用 REST：Base URL `${KAKA_BASE_URL:-https://api.cardcrafter.cn}`，每个请求带 `Authorization: Bearer $KAKA_API_KEY`。接入教程：https://www.cardcrafter.cn/platforms/workbuddy

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · README.md (reported line 50)May include surrounding context.

md
## 工具面：优先远程 MCP

若环境已连接卡咔远程 MCP（WorkBuddy：插件 → MCP 服务器 → 配置 MCP，端点 `https://api.cardcrafter.cn/mcp`，鉴权 `Authorization: Bearer $KAKA_API_KEY`），**直接用 MCP 工具**：get_me / list_styles / generate_viral_outline / generate_viral_images / generate_cover / generate_card / get_record 等 12 个，与下文 REST 端点一一对应，跳过 curl 写法。

未连接 MCP 时用 REST：Base URL `${KAKA_BASE_URL:-https://api.cardcrafter.cn}`，每个请求带 `Authorization: Bearer $KAKA_API_KEY`。接入教程：https://www.cardcrafter.cn/platforms/workbuddy

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 33)May include surrounding context.

md
## 工具面：优先远程 MCP

若环境已连接卡咔远程 MCP（WorkBuddy：插件 → MCP 服务器 → 配置 MCP，端点 `https://api.cardcrafter.cn/mcp`，鉴权 `Authorization: Bearer $KAKA_API_KEY`），**直接用 MCP 工具**：get_me / list_styles / generate_viral_outline / generate_viral_images / generate_cover / generate_card / get_record 等 12 个，与下文 REST 端点一一对应，跳过 curl 写法。

未连接 MCP 时用 REST：Base URL `${KAKA_BASE_URL:-https://api.cardcrafter.cn}`，每个请求带 `Authorization: Bearer $KAKA_API_KEY`。接入教程：https://www.cardcrafter.cn/platforms/workbuddy

External Transmission

Medium
Category
Data Exfiltration
Confidence
60% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 79)May include surrounding context.

GET /openapi/v1/me — 账户与能量余额

bash
curl -sS "${KAKA_BASE_URL:-https://api.cardcrafter.cn}/openapi/v1/me" \
  -H "Authorization: Bearer $KAKA_API_KEY"

External Transmission

Medium
Category
Data Exfiltration
Confidence
60% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 141)May include surrounding context.

单页重生成（异步）

bash
curl -sS -X POST "${KAKA_BASE_URL:-https://api.cardcrafter.cn}/openapi/v1/viral/images/regenerate" \
  -H "Authorization: Bearer $KAKA_API_KEY" -H "Content-Type: application/json" \
  -d '{"record_id": "rec_xxxx", "page_index": 2}'
# 封面 / 卡片同理，端点换为 /covers/regenerate、/cards/regenerate（可带 feedback 字段）

Static analysis

No suspicious patterns detected.