Back to skill

Security audit

Apidot Kling 2 6 Api

Security checks for vulnerabilities and agentic risk

Overview

This is a documentation-only APIDot Kling 2.6 helper with disclosed API-key handling guidance and no executable code.

This skill appears safe to install as documentation. Treat APIDOT_API_KEY as a real secret, keep it server-side, avoid pasting keys or private media URLs into chat/logs, and verify APIDot pricing, availability, and docs before making live API calls.

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Static analysis

No suspicious patterns detected.