Security audit
Security checks for vulnerabilities and agentic risk
This skill is a small, disclosed quick-auth helper that handles sensitive login credentials, so users should verify the host and avoid exposing raw tokens in chat.
Install only if you intend to use Moss quick auth. Check that the host is correct before running it, and prefer redacted output for access_token, refresh_token, api_key, and temp_password unless you truly need the raw values in the chat transcript.
The output contract explicitly allows returning raw credentials on request and references disclosure of a one-time temp_password. Exposing access tokens, refresh tokens, api_key, or one-time passwords in assistant responses materially increases the risk of credential leakage through chat logs, screenshots, client telemetry, or prompt injection-driven exfiltration.
The skill instructions are written in Chinese and the metadata explicitly says 'B-only Quick Auth' without offering any language choice. Under the policy rules, forcing a specific language or locale without user opt-in is a natural-language policy violation unless the constraint is documented and justified as region-specific, which is not stated here.
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
curl -sS -X POST "https://<host>/studio-api/v1/auth/quick/api-login" \
-H 'Content-Type: application/json' \
--data '{"email":"<email>"}'
No suspicious patterns detected.