Security audit

即梦短剧生成

Security checks for vulnerabilities and agentic risk

Overview

The skill describes a coherent video-generation workflow with spending approval, while installation requires trusting external software.

Review the repository and downloaded installer before execution. Use mock mode first, approve credit costs, and submit only scripts and reference assets you are comfortable sharing with Dreamina. Only the instruction file was bundled; external runtime behavior could not be verified.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Output HandlingUnvalidated Output Injection, Cross-Context Output, Unbounded Output
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access

Findings (12)

External Script Fetching

High

Category: Supply Chain
Confidence: 99% confidence
Finding: Piping an HTTPS response directly into bash executes mutable remote code without prior inspection or independent integrity verification. Compromise of the distribution endpoint could execute attacker-controlled commands with the invoking user's privileges, potentially exposing credentials and project files; the claimed official origin does not eliminate this risk.
Content: Scanner excerpt · SKILL.md (reported line 18)May include surrounding context.
npm install

text
需要：Node ≥ 20、ffmpeg、即梦 CLI（`curl -fsSL https://jimeng.jianying.com/cli | bash`），以及**即梦会员账号**。 ## 第一步永远是自检

MCP server referenced without pinned version: 'npx tsx'.

Medium

Category: MCP Rug Pull
Confidence: 70% confidence
Finding: npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.
Content: No source excerpt is available for this finding.

MCP server referenced without pinned version: 'npx tsx'.

Medium

Category: MCP Rug Pull
Confidence: 70% confidence
Finding: npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.
Content: No source excerpt is available for this finding.

MCP server referenced without pinned version: 'npx tsx'.

Medium

Category: MCP Rug Pull
Confidence: 70% confidence
Finding: npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.
Content: No source excerpt is available for this finding.

MCP server referenced without pinned version: 'npx tsx'.

Medium

Category: MCP Rug Pull
Confidence: 70% confidence
Finding: npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.
Content: No source excerpt is available for this finding.

MCP server referenced without pinned version: 'npx tsx'.

Medium

Category: MCP Rug Pull
Confidence: 70% confidence
Finding: npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.
Content: No source excerpt is available for this finding.

MCP server referenced without pinned version: 'npx tsx'.

Medium

Category: MCP Rug Pull
Confidence: 70% confidence
Finding: npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.
Content: No source excerpt is available for this finding.

MCP server referenced without pinned version: 'npx tsx'.

Medium

Category: MCP Rug Pull
Confidence: 70% confidence
Finding: npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.
Content: No source excerpt is available for this finding.

MCP server referenced without pinned version: 'npx tsx'.

Medium

Category: MCP Rug Pull
Confidence: 70% confidence
Finding: npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.
Content: No source excerpt is available for this finding.

MCP server referenced without pinned version: 'npx tsx'.

Medium

Category: MCP Rug Pull
Confidence: 70% confidence
Finding: npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.
Content: No source excerpt is available for this finding.

MCP server referenced without pinned version: 'npx tsx'.

Medium

Category: MCP Rug Pull
Confidence: 70% confidence
Finding: npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.
Content: No source excerpt is available for this finding.

The generation workflow lacks a privacy warning about sending project content to Dreamina.

Medium

Category: Output Handling
Confidence: 93% confidence
Finding: The workflow instructs the agent to generate character images and video shots through Dreamina, which entails transmitting script-derived prompts and applicable reference material to an external service. The skill requires approval for credit consumption but does not disclose the data transfer or warn users before submitting potentially private project content.
Content: No source excerpt is available for this finding.