Security audit
qwen-image
Security checks for vulnerabilities and agentic risk
Overview
This skill is a coherent RunAPI helper for generating or editing images with Qwen Image, with expected network use, optional authentication, and no hidden or destructive behavior found.
Before installing, confirm you trust RunAPI for the images and prompts you submit. Avoid providing private media unless you are comfortable uploading it to the service, and use a scoped API key where possible.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.