Tencent VOD AIGC code helper

• Outcome: Pass
• Latest audit: Sep 16, 2026 · 5:55 AM UTC
• Version: 1.0.1

Overview

This skill is a Tencent Cloud VOD AIGC integration guide with expected SDK, credential, API, and billing guidance, and no hidden execution or persistence behavior.

Before installing or using this skill, be aware that the example APIs can create paid Tencent Cloud jobs. Use least-privileged Tencent Cloud keys, keep credentials in environment variables or a secret manager, set billing alerts or limits, and prefer pinned SDK versions in an isolated environment instead of upgrading blindly to latest.

A.I.G

Vulnerability Patterns

• Insecure Dependencies: Introduces malicious components through unsafe dependency sources
• Skill Instruction Hijacking: Alters the agent's session goals or safety constraints when the skill loads
• Agent Memory Poisoning: Writes attacker-controlled rules into memory that affect later sessions
• Remote Payload Retrieval and Execution: Fetches external code whose behavior can change after review
• Embedded Malicious Code: Ships malicious scripts inside the skill and executes them locally

Findings (1)

T08 · Insecure Dependencies

Warning

• Location: SKILL.md:109

Finding

Unpinned Third-Party SDK Installation

Content

View full analysis

Vulnerability Details

File Location: SKILL.md:109-111, SKILL.md:265, and SKILL.md:424
Vulnerability Type: Unpinned third-party dependencies
Risk Level: Medium

Vulnerable Code

At SKILL.md:109-111:

bash

pip3 install tencentcloud-sdk-python
# If already installed, upgrade to the latest version
pip3 install --upgrade tencentcloud-sdk-python

At SKILL.md:265:

bash

go get github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/vod/v20180717

The troubleshooting guidance at SKILL.md:424 also directs users to run:

bash

pip3 install --upgrade tencentcloud-sdk-python

Technical Analysis

The installation commands do not pin the Tencent Cloud SDK to a reviewed version or verify the integrity of downloaded artifacts. The upgrade command explicitly resolves the latest package version available when the user executes it. The Go command similarly lacks an explicit module version.

The package and repository names are consistent with Tencent Cloud's declared official SDKs. The audit found no evidence of typosquatting, dependency confusion, a deliberately malicious source, or a currently compromised release. The weakness is that the effective dependency code can change after the Skill has been reviewed.

Package installation and later SDK imports execute code supplied by the resolved dependency and its transitive dependencies. Because the examples use the SDK in a process containing Tencent Cloud credentials, a compromised future release could access those credentials or modify API requests.

Attack Path

1. A user follows the Skill's installation or upgrade instructions.
2. The package manager resolves a mutable, unpinned SDK release and its transitive dependencies.
3. An upstream account compromise, malicious dependency release, or compromised distribution channel causes an altered package to be returned.
4. The altered dependency executes during installation ...[truncated 1247 chars]

Remediation

View remediation

Remediation Suggestions

1. Pin the Python SDK to a reviewed release rather than installing or upgrading to an unconstrained latest version:

   bash

   python3 -m pip install "tencentcloud-sdk-python==REVIEWED_VERSION"
   

2. Pin the Go module to a reviewed semantic version:

   bash

   go get github.com/tencentcloud/tencentcloud-sdk-go@REVIEWED_VERSION
   

3. Maintain lock files or equivalent reproducible dependency metadata and review all transitive dependency changes before updating.

4. For Python deployments, use hash verification such as a requirements file containing exact versions and --hash entries, then install with --require-hashes.

5. Verify packages against the official Tencent Cloud publication channels and inspect publisher, repository, and release provenance.

6. Replace generic “upgrade to latest” troubleshooting advice with instructions to upgrade to a specifically reviewed minimum or exact version.

7. Install dependencies in an isolated virtual environment, container, or restricted build environment rather than into a privileged or system-wide interpreter.

8. Run the examples under a least-privileged operating-system account and use narrowly scoped Tencent Cloud credentials. Rotate credentials immediately if dependency compromise is suspected.

SkillSpector

Vulnerability Patterns

• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

Natural-Language Policy Violations

Medium

• Category: Not specified by scanner
• Confidence: 88% confidence

Finding

The description and all mandatory response instructions are written as if the assistant must operate in Chinese for all users, including '必须主动提供' links and required disclosures, but there is no opt-in or alternative language option. Under the language/locale policy rule, forcing a specific language without user choice is a natural-language policy concern unless the regional constraint is clearly justified.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.