Security audit

爆款短视频封面

Security checks for vulnerabilities and agentic risk

Overview

This skill is a narrowly scoped image-generation helper for Chinese vertical short-video covers, with no evidence of hidden execution, credential access, or unrelated data handling.

Install this if you want a Chinese short-video cover generator. Be aware that prompts and any supplied photos may be sent to the image-generation tool, and the skill is not intended for non-Chinese or non-short-video image tasks unless modified.

SkillSpector

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

Natural-Language Policy Violations

Medium

Confidence: 84% confidence
Finding: The skill metadata explicitly constrains output to Chinese-language short-video covers, which can override or conflict with a user's language preference without explicit opt-in. This is not a direct code-execution or data-exfiltration issue, but it can cause unauthorized behavior, reduce user control, and create prompt-steering risk when the agent invokes the skill implicitly.

Static analysis

No suspicious patterns detected.