Security audit
Security checks for vulnerabilities and agentic risk
This skill is a clearly disclosed NanoPhoto.AI API wrapper for Sora watermark removal, with no hidden code, persistence, or unrelated access.
Install only if you trust NanoPhoto.AI with the Sora share links you submit and have the rights to remove watermarks from that content. Configure NANOPHOTO_API_KEY through the platform's secure environment settings, not in chat, and check NanoPhoto.AI's privacy and retention terms for your use case.
The skill instructs users to submit a Sora share link to NanoPhoto.AI but does not clearly warn that the link and associated video will be transmitted to a third-party service for processing. This creates a privacy and consent issue because users may not realize their content is leaving the host platform and being handled by an external provider.
The documented API call sends user-supplied content identifiers and an authorization token to an external domain, which is an external transmission of potentially sensitive user content. In this skill's context, the transmission is core functionality, but it is still security-relevant because the user content is processed off-platform by a third party and the bearer token grants API access if mishandled.
curl -X POST "https://nanophoto.ai/api/sora/remove-watermark" \
-H "Content-Type: application/json" \
-H "Authorization: Bearer $NANOPHOTO_API_KEY" \
--data-raw '{
The documentation instructs users to send a Sora share link to a third-party service but does not warn that this transmits user-provided content and associated metadata outside the original platform. In a skill explicitly designed to remove watermarks, this omission is more sensitive because users may not expect redistribution or third-party processing of potentially private or copyrighted media references.
The example request demonstrates external transmission of a Sora share link and an API credential to NanoPhoto.AI, a third-party service. While the transmission is the intended functionality, it is still security-relevant because the skill facilitates off-platform processing of user content for watermark removal, which can expose private media references and raises policy, privacy, and misuse concerns.
curl -X POST "https://nanophoto.ai/api/sora/remove-watermark" \
-H "Content-Type: application/json" \
-H "Authorization: Bearer YOUR_API_KEY" \
--data-raw '{
This markdown file describes the skill's purpose in natural language but does not specify any concrete trigger phrases, scope limits, or negative examples for when the skill should or should not activate. Because manifest/description text can influence invocation behavior, the broad description could contribute to unintended activation for general watermark-removal requests.
No suspicious patterns detected.