Security audit
Chaoji Skills
Security checks for vulnerabilities and agentic risk
Overview
This appears to be a disclosed ChaoJi image-processing skill, but it uses ChaoJi API keys, runs bundled Python scripts, uploads selected images to ChaoJi/OSS, and saves generated outputs locally.
Install only if you trust the ChaoJi provider and are comfortable giving the skill API credentials, uploading selected images for processing, and allowing bundled Python scripts to save generated outputs locally. Review the full chaoji-tools runner code if you plan to use direct command execution.
Static analysis
No suspicious patterns detected.
