Security audit
Apidot Flux 2 Api
Security checks across malware telemetry and agentic risk
Overview
This is a documentation-only skill for using APIDot FLUX.2 APIs and does not include executable code or hidden automation.
Review the APIDot links and only provide APIDOT_API_KEY in a server-side environment you control. If you use the webhook or persistence guidance, avoid logging private prompts, private image URLs, callback URLs, or generated outputs unless that is acceptable for your application.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
62/62 vendors flagged this skill as clean.