Security audit
Apidot Tripo P1 3d Api
Security checks for vulnerabilities and agentic risk
Overview
This is a documentation-only skill for APIDot Tripo P1 3D API guidance, with no executable code or hidden credential handling found.
Reasonable to install if you want APIDot Tripo P1 3D API guidance. Keep any APIDOT_API_KEY in a server-side secret store, verify current APIDot docs before making real requests, and avoid logging private prompts, source image URLs, callback URLs, or generated asset URLs.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.
