Security audit
Security checks for vulnerabilities and agentic risk
This skill is a coherent ecommerce image-editing router that discloses its remote services and CLI use, with no evidence of hidden persistence, destructive behavior, or unrelated data access.
Install only if you are comfortable sending product images, reference images, and listing context to Morzai/Lumo remote services or through the morzai CLI. Use environment variables or the CLI's auth flow for credentials, and avoid submitting confidential product photos unless that matches your data-sharing policy.
This manifest file defines activation keywords such as "listing package", "marketing poster", "recolor", "match color", "product image", and "white background" without contextual constraints or exclusion conditions. Several of these phrases are generic enough to appear in ordinary design or image-editing requests, which could cause unintended skill invocation.
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
},
"MORZAI_GATEWAY_URL": {
"type": "string",
"description": "The base URL for the remote MCP server. Default is https://api.lumo.me/mcp/v1",
"required": false
},
"MORZAI_CLI_PATH": {
Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.
- Routing rules, required inputs, follow-up prompts, and execution mapping are defined in [api/commands.json](api/commands.json).
- Child skill details stay in:
- [skills/apparel-recolor/SKILL.md](skills/apparel-recolor/SKILL.md)
- [skills/garment-retouch/SKILL.md](skills/garment-retouch/SKILL.md)
- [skills/clothing-adjustment/SKILL.md](skills/clothing-adjustment/SKILL.md)
- [skills/ecommerce-product-kit/SKILL.md](skills/ecommerce-product-kit/SKILL.md)
Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.
- Routing rules, required inputs, follow-up prompts, and execution mapping are defined in [api/commands.json](api/commands.json).
- Child skill details stay in:
- [skills/apparel-recolor/SKILL.md](skills/apparel-recolor/SKILL.md)
- [skills/garment-retouch/SKILL.md](skills/garment-retouch/SKILL.md)
- [skills/clothing-adjustment/SKILL.md](skills/clothing-adjustment/SKILL.md)
- [skills/ecommerce-product-kit/SKILL.md](skills/ecommerce-product-kit/SKILL.md)
Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.
- Routing rules, required inputs, follow-up prompts, and execution mapping are defined in [api/commands.json](api/commands.json).
- Child skill details stay in:
- [skills/apparel-recolor/SKILL.md](skills/apparel-recolor/SKILL.md)
- [skills/garment-retouch/SKILL.md](skills/garment-retouch/SKILL.md)
- [skills/clothing-adjustment/SKILL.md](skills/clothing-adjustment/SKILL.md)
- [skills/ecommerce-product-kit/SKILL.md](skills/ecommerce-product-kit/SKILL.md)
Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.
- Routing rules, required inputs, follow-up prompts, and execution mapping are defined in [api/commands.json](api/commands.json).
- Child skill details stay in:
- [skills/apparel-recolor/SKILL.md](skills/apparel-recolor/SKILL.md)
- [skills/garment-retouch/SKILL.md](skills/garment-retouch/SKILL.md)
- [skills/clothing-adjustment/SKILL.md](skills/clothing-adjustment/SKILL.md)
- [skills/ecommerce-product-kit/SKILL.md](skills/ecommerce-product-kit/SKILL.md)
Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.
- Child skill details stay in:
- [skills/apparel-recolor/SKILL.md](skills/apparel-recolor/SKILL.md)
- [skills/garment-retouch/SKILL.md](skills/garment-retouch/SKILL.md)
- [skills/clothing-adjustment/SKILL.md](skills/clothing-adjustment/SKILL.md)
- [skills/ecommerce-product-kit/SKILL.md](skills/ecommerce-product-kit/SKILL.md)
## Flow
Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.
- Child skill details stay in:
- [skills/apparel-recolor/SKILL.md](skills/apparel-recolor/SKILL.md)
- [skills/garment-retouch/SKILL.md](skills/garment-retouch/SKILL.md)
- [skills/clothing-adjustment/SKILL.md](skills/clothing-adjustment/SKILL.md)
- [skills/ecommerce-product-kit/SKILL.md](skills/ecommerce-product-kit/SKILL.md)
## Flow
Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.
- Child skill details stay in:
- [skills/apparel-recolor/SKILL.md](skills/apparel-recolor/SKILL.md)
- [skills/garment-retouch/SKILL.md](skills/garment-retouch/SKILL.md)
- [skills/clothing-adjustment/SKILL.md](skills/clothing-adjustment/SKILL.md)
- [skills/ecommerce-product-kit/SKILL.md](skills/ecommerce-product-kit/SKILL.md)
## Flow
Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.
- Child skill details stay in:
- [skills/apparel-recolor/SKILL.md](skills/apparel-recolor/SKILL.md)
- [skills/garment-retouch/SKILL.md](skills/garment-retouch/SKILL.md)
- [skills/clothing-adjustment/SKILL.md](skills/clothing-adjustment/SKILL.md)
- [skills/ecommerce-product-kit/SKILL.md](skills/ecommerce-product-kit/SKILL.md)
## Flow
Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.
- [skills/apparel-recolor/SKILL.md](skills/apparel-recolor/SKILL.md)
- [skills/garment-retouch/SKILL.md](skills/garment-retouch/SKILL.md)
- [skills/clothing-adjustment/SKILL.md](skills/clothing-adjustment/SKILL.md)
- [skills/ecommerce-product-kit/SKILL.md](skills/ecommerce-product-kit/SKILL.md)
## Flow
Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.
- [skills/apparel-recolor/SKILL.md](skills/apparel-recolor/SKILL.md)
- [skills/garment-retouch/SKILL.md](skills/garment-retouch/SKILL.md)
- [skills/clothing-adjustment/SKILL.md](skills/clothing-adjustment/SKILL.md)
- [skills/ecommerce-product-kit/SKILL.md](skills/ecommerce-product-kit/SKILL.md)
## Flow
Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.
- [skills/apparel-recolor/SKILL.md](skills/apparel-recolor/SKILL.md)
- [skills/garment-retouch/SKILL.md](skills/garment-retouch/SKILL.md)
- [skills/clothing-adjustment/SKILL.md](skills/clothing-adjustment/SKILL.md)
- [skills/ecommerce-product-kit/SKILL.md](skills/ecommerce-product-kit/SKILL.md)
## Flow
Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.
- [skills/apparel-recolor/SKILL.md](skills/apparel-recolor/SKILL.md)
- [skills/garment-retouch/SKILL.md](skills/garment-retouch/SKILL.md)
- [skills/clothing-adjustment/SKILL.md](skills/clothing-adjustment/SKILL.md)
- [skills/ecommerce-product-kit/SKILL.md](skills/ecommerce-product-kit/SKILL.md)
## Flow
Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.
"commands": {
"apparel-recolor": {
"task": "recolor",
"child_skill": "skills/apparel-recolor/SKILL.md",
"intent_keywords": [
"recolor",
"change color",
Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.
"commands": {
"apparel-recolor": {
"task": "recolor",
"child_skill": "skills/apparel-recolor/SKILL.md",
"intent_keywords": [
"recolor",
"change color",
Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.
"commands": {
"apparel-recolor": {
"task": "recolor",
"child_skill": "skills/apparel-recolor/SKILL.md",
"intent_keywords": [
"recolor",
"change color",
Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.
"commands": {
"apparel-recolor": {
"task": "recolor",
"child_skill": "skills/apparel-recolor/SKILL.md",
"intent_keywords": [
"recolor",
"change color",
This manifest sets the optional input "language" to a fixed default of "English", which can force a specific output language even when the user has not requested it. The policy requires language or locale choices to be user-driven or clearly justified, and no opt-in or justification is provided here.
The skill explicitly establishes English as the default interaction and delivery language without requiring affirmative user preference, which can cause user intent to be misunderstood or outputs to be delivered in the wrong language. In an ecommerce workflow, this can produce incorrect listing content, compliance mistakes for local marketplaces, or user confusion, especially when product claims and market-specific text matter.
The execution guidance tells the agent to default to English unless the user clearly prefers Chinese, which biases runtime behavior toward a non-user-confirmed language choice. This increases the chance of generating mislabeled or market-inappropriate ecommerce assets, and could cause inaccurate promotional text or failed localization in downstream listings.
The trigger list adds Chinese-language activation phrases alongside English ones, but the manifest does not explain whether multilingual routing is optional, user-selected, or limited to a defined locale context. This can create an implicit language/locale behavior without clear opt-in or documented scope.
No suspicious patterns detected.