baiyin-image-generate-skill

• Outcome: Review
• Latest audit: May 29, 2026 at 9:34 PM UTC
• Version:
  1.0.4

Overview

The skill may be useful, but it appears to let an agent upload local files to a remote service without clear user confirmation.

Review before installing. Only use this skill with files you intentionally want to send to its remote service, and prefer a version that asks for explicit confirmation and names the destination before uploading any local path.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

Missing User Warnings

Medium

• Confidence: 96% confidence
• Finding: The skill instructs the agent to treat any non-HTTP(S) input as a local path and automatically upload it to a remote endpoint, without requiring explicit user confirmation or warning that data will leave the local environment. This creates a real risk of unintended exfiltration of local files, sensitive attachments, or private resources if a user supplies a path, pasted tokenized reference, or other non-public locator.

VirusTotal

65/65 vendors flagged this skill as clean.