Security audit
Security checks across malware telemetry and agentic risk
The skill mostly matches a WeChat marketing poster generator, but it exposes review-worthy network, credential, and data-retention risks.
Review before installing. Prefer polling over callback mode; if callbacks are needed, bind only to localhost or a protected interface, add authentication, and clean the callback directory after use. Confirm which image provider and model your credential files will use, and avoid entering sensitive business details, private phone numbers, or QR codes unless you are comfortable storing them in generated files and sending prompt content to external image services.
63/63 vendors flagged this skill as clean.
No suspicious patterns detected.
