Security audit
Security checks for vulnerabilities and agentic risk
This skill is a straightforward AI-art prompt generator that sends a user-provided theme to a disclosed external API, with no local code execution or persistence found.
Before installing, be aware that themes you submit may be sent to the disclosed third-party API service, and pricing limits are documented. Avoid putting private, sensitive, or credential-like information into the theme field.
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
## References
- **Kong Route:** https://api.mkkpro.com/creative/ai-art-prompt
- **API Docs:** https://api.mkkpro.com:8017/docs
This markdown skill file describes what the skill does but does not specify how or when it should be invoked, nor does it provide bounded trigger phrases or exclusion conditions. In a skill-dispatch system, that absence can make matching overly broad and increase the risk of unintended invocation for generic creative requests.
This JSON OpenAPI file is a manifest-type file, so vague-trigger checks apply. The only invocation cue is a generic endpoint and summary of "Generate Prompt," without any specificity about when this skill should or should not be used, which could allow overly broad matching in systems that derive activation from manifest metadata.
No suspicious patterns detected.