Security audit
Security checks for vulnerabilities and agentic risk
The skill is rated benign with medium confidence: scanners report a disclosed image-processing workflow and no bundled executable scripts, alongside privacy and unpinned installer concerns; coverage is incomplete because a referenced local path could not be resolved.
Before installing, consider whether you are comfortable sending model and garment photos to an external image service, and check the service's privacy and retention terms. The installer version is not pinned. Confidence is medium, and evidence is incomplete because a local path-like reference could not be resolved; benign is not a guarantee of zero risk.
The README identifies cloud services but does not explicitly explain that supplied photos will be disclosed to external processors. In this workflow, model photos can contain identifiable people and private surroundings, making the missing privacy notice more consequential than for public garment packshots alone.
The installation command invokes an unpinned npm package through npx, allowing the executed installer to change between installations. Although the finding incorrectly describes this as an MCP server, a compromised future package release could execute code with the installing user's permissions.
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
openclaw:
requires:
anyBins:
- curl
homepage: https://varg.ai/how-to
compatibility: >-
Needs a VARG_API_KEY with curl (see the varg-ai skill) or the varg MCP connection
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
curl -s -X POST https://api.varg.ai/v2/image -H "Authorization: Bearer $VARG_API_KEY" -H "Content-Type: application/json" \
-d '{"model":"bria_fibo_edit_1_5_virtual_try_on","files":[{"url":"MODEL_URL"},{"url":"GARMENT_URL"}],
"prompt":"Dress the woman in the cardigan from the second image, worn open over her white t-shirt. Keep her face, hair, pose, jeans, sneakers and the room unchanged."}'
The API request provides an external service with access to model and garment images without requiring confirmation that these photos may be shared for remote processing. The likeness-consent instructions are useful, but consent to appear in an image does not necessarily authorize sharing it with external AI processors.
Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.
- Caption the size: "Model 170 cm, wears M". Offer 2–3 body types for bestsellers.
- Show realistic drape; don't let the model slim or reshape the body.
- AI model = AI label on TikTok and Meta; in ads reaching New York, a visible synthetic-performer disclosure (`ai-ad-compliance-check`). Never use a real person's likeness without consent.
## Failure modes