Kling Image Generate

• Outcome: Pass
• Latest audit: May 28, 2026 · 5:45 AM UTC
• Version: 1.0.1

Overview

This skill is a disclosed Kling image-generation helper that sends user-provided prompts and image references to Kling’s API, with no evidence of hidden persistence, destructive behavior, or unrelated data access.

Install only if you are comfortable sending the prompts, image inputs or image URLs, callback URLs, and task metadata you provide to Kling’s API. Keep the Kling API keys private, consider using a dedicated or limited key, and install the Python dependencies in a virtual environment with pinned versions if possible.

SkillSpector

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• MCP Least Privilege: Underdeclared Capability, Wildcard Permission, Missing Permission Declaration
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access

Findings (10)

Lp3

Medium

• Category: MCP Least Privilege
• Confidence: 91% confidence
• Finding: The skill documentation instructs use of environment variables for API credentials and multiple scripts that call an external service, but the skill does not declare corresponding env/network permissions. Undeclared sensitive capabilities reduce transparency and policy enforcement, increasing the chance that credentials or outbound access are used without proper review.

Missing User Warnings

Medium

• Confidence: 88% confidence
• Finding: The script transmits user-provided image data, prompts, and optional callback metadata to a third-party remote API, but it does not provide a clear consent or disclosure step at the point of use. In a skill context, users may supply sensitive images or prompts without realizing that this data leaves the local environment and is processed by an external service.

Missing User Warnings

Medium

• Confidence: 87% confidence
• Finding: The script sends prompts, optional images, and callback metadata to an external cloud API, but there is no explicit consent notice or warning at execution time. In an agent-skill context, users may not realize that potentially sensitive text or image content is leaving the local environment and being processed by a third party.

Missing User Warnings

Medium

• Confidence: 86% confidence
• Finding: The script sends prompts, image URLs/references, optional element IDs, and an optional callback URL to a third-party API without any explicit consent notice or user-facing disclosure at runtime. In an agent-skill context, this can surprise users and lead to unintended sharing of sensitive prompts, internal image URLs, or operational endpoint details.

Unpinned Dependencies

Low

• Category: Supply Chain

Content

requests>=2.28.0
PyJWT>=2.8.0
cryptography>=41.0.0

• Confidence: 96% confidence
• Finding: The dependency specification uses a lower bound only (`requests>=2.28.0`), which allows installation of any later version, including versions with incompatible behavior or newly introduced vulnerabilities. In a security-sensitive skill that performs authenticated API calls, unpinned dependencies reduce build reproducibility and can cause the environment to resolve to unsafe or untested packages.

Unpinned Dependencies

Low

• Category: Supply Chain

Content

requests>=2.28.0
PyJWT>=2.8.0
cryptography>=41.0.0

• Confidence: 96% confidence
• Finding: `PyJWT>=2.8.0` is unpinned, so installs may resolve to versions that have known JWT parsing or validation weaknesses, depending on when and where the package is installed. Because this skill uses key-based authentication and likely handles signed tokens, dependency drift in a JWT library can directly affect authentication integrity.

Unpinned Dependencies

Low

• Category: Supply Chain

Content

requests>=2.28.0
PyJWT>=2.8.0
cryptography>=41.0.0

• Confidence: 95% confidence
• Finding: `cryptography>=41.0.0` allows uncontrolled upgrades to future versions and does not ensure a reproducible, vetted cryptographic stack. Since this skill relies on secret-based authentication, unresolved cryptography version drift can expose the system to broken wheels, vulnerable bundled OpenSSL versions, or compatibility changes affecting secure operations.

Known Vulnerable Dependency: requests — 10 advisory(ies): CVE-2014-1830 (Exposure of Sensitive Information to an Unauthorized Actor in Requests); CVE-2024-47081 (Requests vulnerable to .netrc credentials leak via malicious URLs); CVE-2024-35195 (Requests `Session` object does not verify requests after making first request wi) +7 more

High

• Category: Supply Chain
• Confidence: 91% confidence
• Finding: The requirements file permits installation of `requests` versions with multiple published advisories because no safe upper or exact version is enforced. In this skill's context, which performs outbound authenticated API requests and may rely on credential sources such as environment or session state, a vulnerable HTTP client can lead to credential leakage, request validation issues, or SSRF-adjacent abuse depending on usage.

Known Vulnerable Dependency: PyJWT — 8 advisory(ies): CVE-2026-32597 (PyJWT accepts unknown `crit` header extensions); CVE-2024-53861 (PyJWT Issuer field partial matches allowed); CVE-2022-29217 (Key confusion through non-blocklisted public key formats) +5 more

High

• Category: Supply Chain
• Confidence: 89% confidence
• Finding: The file allows `PyJWT` versions that may include known flaws such as issuer validation weaknesses or key confusion issues, and JWT libraries are often security-critical. Given this skill authenticates to an external API using secrets and may create or validate tokens, weaknesses in JWT handling can enable authentication bypass, token forgery acceptance, or improper trust decisions.

Known Vulnerable Dependency: cryptography — 10 advisory(ies): GHSA-39hc-v87j-747x (Vulnerable OpenSSL included in cryptography wheels); CVE-2023-50782 (Python Cryptography package vulnerable to Bleichenbacher timing oracle attack); GHSA-5cpq-8wj7-hf2v (Vulnerable OpenSSL included in cryptography wheels) +7 more

High

• Category: Supply Chain
• Confidence: 90% confidence
• Finding: The requirements permit vulnerable `cryptography` releases, including versions affected by cryptographic implementation or bundled OpenSSL issues. Because this skill depends on secret-based authentication, flaws in cryptographic primitives or TLS-related dependencies can undermine confidentiality, integrity, or certificate handling in a way that is especially sensitive for API credentials.

Static analysis

No suspicious patterns detected.