Jiuma AI Video Generation (Free)

• Outcome: Pass
• Latest audit: Sep 16, 2026 · 3:31 AM UTC
• Version: 1.1.2

Overview

This skill is a disclosed Jiuma media-generation integration that stores a service token and uploads user-selected media files, with some setup and credential-storage cautions.

Install only if you are comfortable authenticating with Jiuma and sending selected local media files to api.jiuma.com. Use an isolated Python environment, prefer a secure OS keychain, avoid uploading sensitive documents or private files, and revoke the Jiuma token if you stop using the skill.

A.I.G

Vulnerability Patterns

• Insecure Dependencies: Introduces malicious components through unsafe dependency sources
• Insecure Skill Coding Practices: Finds exploitable flaws such as hardcoded secrets or command injection
• Skill Instruction Hijacking: Alters the agent's session goals or safety constraints when the skill loads
• Agent Memory Poisoning: Writes attacker-controlled rules into memory that affect later sessions
• Remote Payload Retrieval and Execution: Fetches external code whose behavior can change after review

Findings (2)

T08 · Insecure Dependencies

Warning

• Location: SKILL.md:129

Finding

Unpinned Third-Party Security Dependencies

Content

View full analysis

Remediation

View remediation

T09 · Insecure Skill Coding Practices

Warning

• Location: scripts/auth.py:23

Finding

Bearer Token May Be Stored by an Insecure Alternative Keyring Backend

Content

View full analysis

Remediation

View remediation

SkillSpector

Vulnerability Patterns

• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• MCP Tool Poisoning: Hidden Instructions, Unicode Deception, Parameter Description Injection
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (53)

Tp4

High

• Category: MCP Tool Poisoning
• Confidence: 97% confidence

Finding

The skill is marketed as a media-generation tool, but it also supports uploading arbitrary local files to a remote platform and retrieving credentials from keyring. In this context, the behavior mismatch is more dangerous because users may treat uploads as harmless asset preparation without realizing sensitive local files could be exfiltrated to an external service.

Content

No source excerpt is available for this finding.

Tp4

High

• Category: MCP Tool Poisoning
• Confidence: 98% confidence

Finding

The skill is marketed as a media-generation tool, but it also supports uploading arbitrary local files to a remote platform and retrieving credentials from keyring. In this context, the behavior mismatch is more dangerous because users may treat uploads as harmless asset preparation without realizing sensitive local files could be exfiltrated to an external service.

Content

No source excerpt is available for this finding.

Tp4

High

• Category: MCP Tool Poisoning
• Confidence: 96% confidence

Finding

The skill is marketed as a media-generation tool, but it also supports uploading arbitrary local files to a remote platform and retrieving credentials from keyring. In this context, the behavior mismatch is more dangerous because users may treat uploads as harmless asset preparation without realizing sensitive local files could be exfiltrated to an external service.

Content

No source excerpt is available for this finding.

Credential Access

High

• Category: Privilege Escalation
• Confidence: 70% confidence

Finding

Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

Content

Scanner excerpt · SKILL.md (reported line 130)May include surrounding context.

md

import sys
import keyring
import requests

API_BASE_URL = "https://api.jiuma.com/"

Credential Access

High

• Category: Privilege Escalation
• Confidence: 70% confidence

Finding

Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

Content

Scanner excerpt · SKILL.md (reported line 131)May include surrounding context.

md

import sys
import keyring
import requests

API_BASE_URL = "https://api.jiuma.com/"

Credential Access

High

• Category: Privilege Escalation
• Confidence: 70% confidence

Finding

Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

Content

Scanner excerpt · scripts/auth.py (reported line 3)May include surrounding context.

python

import sys
import keyring
import requests

API_BASE_URL = "https://api.jiuma.com/"

Credential Access

High

• Category: Privilege Escalation
• Confidence: 70% confidence

Finding

Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

Content

Scanner excerpt · scripts/auth.py (reported line 26)May include surrounding context.

python

import sys
import keyring
import requests

API_BASE_URL = "https://api.jiuma.com/"

Credential Access

High

• Category: Privilege Escalation
• Confidence: 70% confidence

Finding

Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

Content

Scanner excerpt · scripts/auth.py (reported line 28)May include surrounding context.

python

import sys
import keyring
import requests

API_BASE_URL = "https://api.jiuma.com/"

Credential Access

High

• Category: Privilege Escalation
• Confidence: 70% confidence

Finding

Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

Content

Scanner excerpt · scripts/auth.py (reported line 34)May include surrounding context.

python

import sys
import keyring
import requests

API_BASE_URL = "https://api.jiuma.com/"

Credential Access

High

• Category: Privilege Escalation
• Confidence: 70% confidence

Finding

Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

Content

Scanner excerpt · scripts/auth.py (reported line 37)May include surrounding context.

python

import sys
import keyring
import requests

API_BASE_URL = "https://api.jiuma.com/"

Credential Access

High

• Category: Privilege Escalation
• Confidence: 70% confidence

Finding

Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

Content

Scanner excerpt · scripts/check_auth_status.py (reported line 2)May include surrounding context.

python

import sys
import keyring
import requests

API_BASE_URL = "https://api.jiuma.com/"

Credential Access

High

• Category: Privilege Escalation
• Confidence: 70% confidence

Finding

Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

Content

Scanner excerpt · scripts/check_auth_status.py (reported line 11)May include surrounding context.

python

import sys
import keyring
import requests

API_BASE_URL = "https://api.jiuma.com/"

Credential Access

High

• Category: Privilege Escalation
• Confidence: 70% confidence

Finding

Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

Content

Scanner excerpt · scripts/check_auth_status.py (reported line 14)May include surrounding context.

python

import sys
import keyring
import requests

API_BASE_URL = "https://api.jiuma.com/"

Credential Access

High

• Category: Privilege Escalation
• Confidence: 70% confidence

Finding

Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

Content

Scanner excerpt · scripts/submit_generation_task.py (reported line 3)May include surrounding context.

python

import sys
import keyring
import requests

API_BASE_URL = "https://api.jiuma.com/"

Credential Access

High

• Category: Privilege Escalation
• Confidence: 70% confidence

Finding

Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

Content

Scanner excerpt · scripts/submit_generation_task.py (reported line 27)May include surrounding context.

python

import sys
import keyring
import requests

API_BASE_URL = "https://api.jiuma.com/"

Credential Access

High

• Category: Privilege Escalation
• Confidence: 70% confidence

Finding

Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

Content

Scanner excerpt · scripts/submit_generation_task.py (reported line 29)May include surrounding context.

python

import sys
import keyring
import requests

API_BASE_URL = "https://api.jiuma.com/"

Credential Access

High

• Category: Privilege Escalation
• Confidence: 70% confidence

Finding

Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

Content

Scanner excerpt · scripts/submit_generation_task.py (reported line 35)May include surrounding context.

python

import sys
import keyring
import requests

API_BASE_URL = "https://api.jiuma.com/"

Credential Access

High

• Category: Privilege Escalation
• Confidence: 70% confidence

Finding

Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

Content

Scanner excerpt · scripts/task_result.py (reported line 5)May include surrounding context.

python

import sys
import keyring
import requests

API_BASE_URL = "https://api.jiuma.com/"

Credential Access

High

• Category: Privilege Escalation
• Confidence: 70% confidence

Finding

Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

Content

Scanner excerpt · scripts/task_result.py (reported line 16)May include surrounding context.

python

import sys
import keyring
import requests

API_BASE_URL = "https://api.jiuma.com/"

Credential Access

High

• Category: Privilege Escalation
• Confidence: 70% confidence

Finding

Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

Content

Scanner excerpt · scripts/task_result.py (reported line 19)May include surrounding context.

python

import sys
import keyring
import requests

API_BASE_URL = "https://api.jiuma.com/"

Credential Access

High

• Category: Privilege Escalation
• Confidence: 70% confidence

Finding

Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

Content

Scanner excerpt · scripts/upload_file.py (reported line 4)May include surrounding context.

python

import sys
import keyring
import requests

API_BASE_URL = "https://api.jiuma.com/"

Credential Access

High

• Category: Privilege Escalation
• Confidence: 70% confidence

Finding

Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

Content

Scanner excerpt · scripts/upload_file.py (reported line 21)May include surrounding context.

python

import sys
import keyring
import requests

API_BASE_URL = "https://api.jiuma.com/"

Credential Access

High

• Category: Privilege Escalation
• Confidence: 70% confidence

Finding

Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

Content

Scanner excerpt · scripts/auth.py (reported line 28)May include surrounding context.

python

token = keyring.get_password("jiuma_ai", "authorized_token")
        if token and len(token) > 20:  # 基本验证token长度
            return token
    except (keyring.errors.KeyringError, FileNotFoundError):
        pass
    return None

Credential Access

High

• Category: Privilege Escalation
• Confidence: 70% confidence

Finding

Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

Content

Scanner excerpt · scripts/auth.py (reported line 37)May include surrounding context.

python

token = keyring.get_password("jiuma_ai", "authorized_token")
        if token and len(token) > 20:  # 基本验证token长度
            return token
    except (keyring.errors.KeyringError, FileNotFoundError):
        pass
    return None

Credential Access

High

• Category: Privilege Escalation
• Confidence: 70% confidence

Finding

Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

Content

Scanner excerpt · scripts/check_auth_status.py (reported line 14)May include surrounding context.

python

token = keyring.get_password("jiuma_ai", "authorized_token")
        if token and len(token) > 20:  # 基本验证token长度
            return token
    except (keyring.errors.KeyringError, FileNotFoundError):
        pass
    return None

Static analysis

No suspicious patterns detected.