Security audit
Security checks for vulnerabilities and agentic risk
The skill coherently supports paid media generation through Aicut, with explicit purchase approval and disclosed account access.
Prompts and supplied media go to Aicut for processing; share only content you are comfortable sending externally. Some media-based estimates upload files before purchase approval. Approve each quoted charge deliberately, and log out or revoke the CLI connection when finished.
The skill instructs the agent to generate content through aicut, whose remote API is identified on line 35, without warning that generation inputs leave the user's system. The detailed token-spending confirmation discloses costs but not this data transmission.
The workflow instructs the agent to submit the user's exact speech text, lyrics, or prompts through the audio-generation command. It explicitly obtains consent for payment but does not disclose that this content is transmitted to an external service, which matters if the supplied content is sensitive.
The instructions collect the user's image description and then direct the agent to submit a generation request to Aicut. The required confirmation explains the purchase price, but does not disclose the transfer of user-provided content to the external service, which may matter if the description contains private information.
The workflow instructs the agent to submit the user's requested content to Aicut for video generation. Although it explicitly discloses the price and requires purchase approval, it does not inform the user that their prompt and generation settings will be transmitted to an external service.
No suspicious patterns detected.
