Back to skill

Security audit

Apidot Tripo P1 3d Api

Security checks for vulnerabilities and agentic risk

Overview

This is a documentation-only skill for APIDot Tripo P1 3D API guidance, with no executable code or hidden credential handling found.

Reasonable to install if you want APIDot Tripo P1 3D API guidance. Keep any APIDOT_API_KEY in a server-side secret store, verify current APIDot docs before making real requests, and avoid logging private prompts, source image URLs, callback URLs, or generated asset URLs.

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Static analysis

No suspicious patterns detected.