Image & Video Generation

• Outcome: Review
• Latest audit: Sep 16, 2026 · 7:38 AM UTC
• Version: 1.0.4

Overview

The skill mostly does what it says, but it has review-worthy data-sharing and local-network/download risks users should understand before installing.

Install only if you are comfortable sending prompts and reference images/videos to AI Artist, and do not use private media unless you understand the provider's retention and sharing behavior. Avoid setting FEISHU_WEBHOOK_URL in shared environments unless you intend every prompt and result link to be posted there. Do not print your full AI_ARTIST_TOKEN; rotate it if it has appeared in logs. Use --download cautiously because the skill does not validate returned media URLs or download size.

A.I.G

Vulnerability Patterns

• Insecure Skill Coding Practices: Finds exploitable flaws such as hardcoded secrets or command injection
• Skill Instruction Hijacking: Alters the agent's session goals or safety constraints when the skill loads
• Agent Memory Poisoning: Writes attacker-controlled rules into memory that affect later sessions
• Remote Payload Retrieval and Execution: Fetches external code whose behavior can change after review
• Embedded Malicious Code: Ships malicious scripts inside the skill and executes them locally

Findings (3)

T09 · Insecure Skill Coding Practices

Warning

• Location: scripts/generate_image.py:35

Finding

Predictable Shared Temporary Cache Permits Cache Poisoning and Symlink Attacks

Content

View full analysis

Remediation

View remediation

T09 · Insecure Skill Coding Practices

Error

• Location: scripts/generate_image.py:434

Finding

Unvalidated Server-Provided Media URL Enables Client-Side SSRF and Resource Exhaustion

Content

View full analysis

Remediation

View remediation

T09 · Insecure Skill Coding Practices

Warning

• Location: SKILL.md:563

Finding

Credential Verification Instructions Print the Complete API Token

Content

View full analysis

Remediation

View remediation

SkillSpector

Vulnerability Patterns

• Taint Tracking: Direct Taint Flow, Variable-Mediated Taint Flow, Credential Exfiltration Chain
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (68)

Tainted flow: 'headers' from os.environ.get (line 414, credential/environment) → requests.post (network output)

Critical

• Category: Data Flow
• Confidence: 90% confidence

Finding

Credentials or environment variables flow to a network sink. This is a high-confidence indicator of credential exfiltration.

Content

Scanner excerpt · scripts/generate_image.py (reported line 415)May include surrounding context.

python

with open(file_path, 'rb') as f:
            files = {'file': (os.path.basename(file_path), f)}
            headers = {'X-Api-Key': API_KEY}
            response = requests.post(FILE_UPLOAD_URL, headers=headers, files=files, timeout=120)
            response.raise_for_status()
            result = response.json()

Tainted flow: 'FEISHU_WEBHOOK_URL' from os.environ.get (line 52, credential/environment) → requests.post (network output)

Critical

• Category: Data Flow
• Confidence: 98% confidence

Finding

The script posts prompt content and result URLs to an arbitrary webhook URL taken directly from the FEISHU_WEBHOOK_URL environment variable. This creates an exfiltration path to any attacker-controlled endpoint if the environment is poisoned or misconfigured, and it occurs automatically whenever the variable is set.

Content

Scanner excerpt · scripts/generate_image.py (reported line 533)May include surrounding context.

python

}
            }
        
        response = requests.post(
            FEISHU_WEBHOOK_URL,
            json=content,
            headers={"Content-Type": "application/json"},

Ae1

High

• Category: analysis-evasion
• Confidence: 100% confidence

Finding

Referenced artifact was not completely inspected

Content

Scanner excerpt · SKILL.md (reported line 11)May include surrounding context.

md

查看当前服务端激活的模型请运行：`python3 scripts/generate_image.py --list-models`。

Ae1

High

• Category: analysis-evasion
• Confidence: 100% confidence

Finding

Referenced artifact was not completely inspected

Content

Scanner excerpt · SKILL.md (reported line 67)May include surrounding context.

md

查看当前服务端激活的模型请运行：`python3 scripts/generate_image.py --list-models`。

Ae1

High

• Category: analysis-evasion
• Confidence: 100% confidence

Finding

Referenced artifact was not completely inspected

Content

Scanner excerpt · SKILL.md (reported line 199)May include surrounding context.

md

查看当前服务端激活的模型请运行：`python3 scripts/generate_image.py --list-models`。

Ae1

High

• Category: analysis-evasion
• Confidence: 100% confidence

Finding

Referenced artifact was not completely inspected

Content

Scanner excerpt · SKILL.md (reported line 323)May include surrounding context.

md

查看当前服务端激活的模型请运行：`python3 scripts/generate_image.py --list-models`。

Ae1

High

• Category: analysis-evasion
• Confidence: 100% confidence

Finding

Referenced artifact was not completely inspected

Content

Scanner excerpt · SKILL.md (reported line 326)May include surrounding context.

md

查看当前服务端激活的模型请运行：`python3 scripts/generate_image.py --list-models`。

Ae1

High

• Category: analysis-evasion
• Confidence: 100% confidence

Finding

Referenced artifact was not completely inspected

Content

Scanner excerpt · SKILL.md (reported line 329)May include surrounding context.

md

查看当前服务端激活的模型请运行：`python3 scripts/generate_image.py --list-models`。

Ae1

High

• Category: analysis-evasion
• Confidence: 100% confidence

Finding

Referenced artifact was not completely inspected

Content

Scanner excerpt · SKILL.md (reported line 332)May include surrounding context.

md

查看当前服务端激活的模型请运行：`python3 scripts/generate_image.py --list-models`。

Ae1

High

• Category: analysis-evasion
• Confidence: 100% confidence

Finding

Referenced artifact was not completely inspected

Content

Scanner excerpt · SKILL.md (reported line 335)May include surrounding context.

md

查看当前服务端激活的模型请运行：`python3 scripts/generate_image.py --list-models`。

Ae1

High

• Category: analysis-evasion
• Confidence: 100% confidence

Finding

Referenced artifact was not completely inspected

Content

Scanner excerpt · SKILL.md (reported line 338)May include surrounding context.

md

查看当前服务端激活的模型请运行：`python3 scripts/generate_image.py --list-models`。

Ae1

High

• Category: analysis-evasion
• Confidence: 100% confidence

Finding

Referenced artifact was not completely inspected

Content

Scanner excerpt · SKILL.md (reported line 339)May include surrounding context.

md

查看当前服务端激活的模型请运行：`python3 scripts/generate_image.py --list-models`。

Ae1

High

• Category: analysis-evasion
• Confidence: 100% confidence

Finding

Referenced artifact was not completely inspected

Content

Scanner excerpt · SKILL.md (reported line 342)May include surrounding context.

md

查看当前服务端激活的模型请运行：`python3 scripts/generate_image.py --list-models`。

Ae1

High

• Category: analysis-evasion
• Confidence: 100% confidence

Finding

Referenced artifact was not completely inspected

Content

Scanner excerpt · SKILL.md (reported line 344)May include surrounding context.

md

查看当前服务端激活的模型请运行：`python3 scripts/generate_image.py --list-models`。

Ae1

High

• Category: analysis-evasion
• Confidence: 100% confidence

Finding

Referenced artifact was not completely inspected

Content

Scanner excerpt · SKILL.md (reported line 346)May include surrounding context.

md

查看当前服务端激活的模型请运行：`python3 scripts/generate_image.py --list-models`。

Ae1

High

• Category: analysis-evasion
• Confidence: 100% confidence

Finding

Referenced artifact was not completely inspected

Content

Scanner excerpt · SKILL.md (reported line 349)May include surrounding context.

md

查看当前服务端激活的模型请运行：`python3 scripts/generate_image.py --list-models`。

Ae1

High

• Category: analysis-evasion
• Confidence: 100% confidence

Finding

Referenced artifact was not completely inspected

Content

Scanner excerpt · SKILL.md (reported line 352)May include surrounding context.

md

查看当前服务端激活的模型请运行：`python3 scripts/generate_image.py --list-models`。

Ae1

High

• Category: analysis-evasion
• Confidence: 100% confidence

Finding

Referenced artifact was not completely inspected

Content

Scanner excerpt · SKILL.md (reported line 355)May include surrounding context.

md

查看当前服务端激活的模型请运行：`python3 scripts/generate_image.py --list-models`。

Ae1

High

• Category: analysis-evasion
• Confidence: 100% confidence

Finding

Referenced artifact was not completely inspected

Content

Scanner excerpt · SKILL.md (reported line 358)May include surrounding context.

md

查看当前服务端激活的模型请运行：`python3 scripts/generate_image.py --list-models`。

Ae1

High

• Category: analysis-evasion
• Confidence: 100% confidence

Finding

Referenced artifact was not completely inspected

Content

Scanner excerpt · SKILL.md (reported line 361)May include surrounding context.

md

查看当前服务端激活的模型请运行：`python3 scripts/generate_image.py --list-models`。

Ae1

High

• Category: analysis-evasion
• Confidence: 100% confidence

Finding

Referenced artifact was not completely inspected

Content

Scanner excerpt · SKILL.md (reported line 364)May include surrounding context.

md

查看当前服务端激活的模型请运行：`python3 scripts/generate_image.py --list-models`。

Ae1

High

• Category: analysis-evasion
• Confidence: 100% confidence

Finding

Referenced artifact was not completely inspected

Content

Scanner excerpt · SKILL.md (reported line 367)May include surrounding context.

md

查看当前服务端激活的模型请运行：`python3 scripts/generate_image.py --list-models`。

Ae1

High

• Category: analysis-evasion
• Confidence: 100% confidence

Finding

Referenced artifact was not completely inspected

Content

Scanner excerpt · SKILL.md (reported line 370)May include surrounding context.

md

查看当前服务端激活的模型请运行：`python3 scripts/generate_image.py --list-models`。

Ae1

High

• Category: analysis-evasion
• Confidence: 100% confidence

Finding

Referenced artifact was not completely inspected

Content

Scanner excerpt · SKILL.md (reported line 373)May include surrounding context.

md

查看当前服务端激活的模型请运行：`python3 scripts/generate_image.py --list-models`。

Ae1

High

• Category: analysis-evasion
• Confidence: 100% confidence

Finding

Referenced artifact was not completely inspected

Content

Scanner excerpt · SKILL.md (reported line 376)May include surrounding context.

md

查看当前服务端激活的模型请运行：`python3 scripts/generate_image.py --list-models`。