Security audit
Security checks for vulnerabilities and agentic risk
This skill openly sends a graphic-design prompt to Chuangkit to generate a poster thumbnail and opens the returned image, with no hidden persistence or local privilege behavior found.
Install only if you are comfortable sending design prompts to Chuangkit's external service and having the returned thumbnail opened in your browser. Avoid including confidential business plans, unreleased product details, personal data, or secrets in prompts unless that sharing is acceptable.
The skill description uses broad, common phrases such as '做海报', '设计', and 'Banner', which can cause the skill to trigger on ordinary conversation that only loosely relates to graphic design. Over-broad activation increases the chance of unintended external API calls and browser-opening behavior without the user clearly intending to invoke this specific skill.
The skill sends the user's raw design prompt to a third-party service without explicitly warning the user that their content will leave the local environment. Because design prompts may contain sensitive business plans, marketing copy, personal event details, or confidential product information, this creates a privacy and data-handling risk if users are unaware of the transmission.
No suspicious patterns detected.
