Security audit
Security checks for vulnerabilities and agentic risk
This skill is a small, disclosed DashScope chat CLI that sends a user-provided prompt to Alibaba Cloud using an environment API key.
Install only if you intend to send prompts to Alibaba Cloud DashScope. Treat anything passed in --message as leaving your machine, and do not include secrets, regulated data, or proprietary text unless that use is approved.
The skill documents that it reads DASHSCOPE_API_KEY from the environment, but it does not declare any explicit tool scope or permissions metadata. This creates an authorization/transparency gap: users and hosting systems may not be clearly informed that the skill accesses secrets from the environment, increasing the chance of unintended secret exposure or unsafe execution assumptions.
The skill sends user-supplied prompts to DashScope's third-party API, but the description does not prominently warn users that their input leaves the local environment. This can lead to accidental disclosure of sensitive data, credentials, internal prompts, or proprietary text to an external service under the mistaken belief that the processing is local.
The script sends args.message to a remote API via client.chat.completions.create(...), which transmits user-provided content over the network. There is no confirmation prompt, warning comment, docstring, or print/log statement informing the user that their message will be sent to an external service.
The file presents key descriptive content and the default example prompt in Chinese while the operational instructions are in English, but it does not tell users they may choose their preferred language. This creates an implicit locale preference without opt-in.
The code reads DASHSCOPE_API_KEY from the environment to authenticate with an external service, but the file provides no comment, docstring, or user-facing notice about this credential use. For safety review purposes, accessing sensitive environment variables should include some disclosure unless clearly documented elsewhere.
No suspicious patterns detected.
