Tianshu Wan Video

• Outcome: Pass
• Latest audit: Sep 12, 2026 · 6:53 AM UTC
• Version: 1.0.0

Overview

This skill is a straightforward DashScope video-generation helper that sends user-provided prompts and optional image URLs to Alibaba Cloud when explicitly run.

Install only if you intend to use Alibaba DashScope for video generation. Do not submit sensitive prompts, confidential image URLs, private internal URLs, or proprietary media unless your use of DashScope for that data is approved.

A.I.G

Vulnerability Patterns

• Skill Instruction Hijacking: Alters the agent's session goals or safety constraints when the skill loads
• Agent Memory Poisoning: Writes attacker-controlled rules into memory that affect later sessions
• Remote Payload Retrieval and Execution: Fetches external code whose behavior can change after review
• Embedded Malicious Code: Ships malicious scripts inside the skill and executes them locally
• Unauthorized Access and Privilege Escalation: Obtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• MCP Least Privilege: Underdeclared Capability, Wildcard Permission, Missing Permission Declaration
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (4)

Undeclared Tool Scope

Medium

• Category: MCP Least Privilege
• Confidence: 93% confidence

Finding

The skill requires environment access for DASHSCOPE_API_KEY and performs network-backed API operations, but the manifest does not explicitly declare a tool scope such as permissions or allowed-tools. This weakens least-privilege guarantees and makes the skill's effective capabilities less transparent to reviewers and users, increasing the chance of overbroad execution in hosts that rely on manifest-declared scope.

Content

No source excerpt is available for this finding.

Missing User Warnings

Medium

• Category: Not specified by scanner
• Confidence: 96% confidence

Finding

The documentation instructs users to send prompts and image URLs to an external DashScope video-generation service but does not clearly disclose that this content leaves the local environment and is transmitted to a third party. Users may unknowingly submit sensitive prompts, internal URLs, or proprietary image content, creating confidentiality and compliance risks in this skill's context because external model inference is its core behavior.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

• Category: Not specified by scanner
• Confidence: 95% confidence

Finding

The file contains user-facing documentation and runtime messages entirely in Chinese, including usage text and error output. This imposes a specific language on all users without any opt-in, fallback, or documented region-specific justification, which matches the language/locale policy violation criteria.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

• Category: Not specified by scanner
• Confidence: 82% confidence

Finding

This manifest includes user-facing text and tags in Chinese while other fields are in English, but it does not document any language preference, localization behavior, or user opt-in. That can create an implicit language constraint or inconsistent locale experience, which falls under natural-language policy concerns.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.