AI Gender Swap

• Outcome: Review
• Latest audit: Sep 12, 2026 · 6:09 AM UTC
• Version: 1.0.2

Overview

The skill is mostly a Media.io gender-swap API wrapper, but its top-level description misleadingly advertises Studio Ghibli-style image generation.

Review before installing. Use this only if you want a Media.io AI gender-swap skill, not a Studio Ghibli-style image generator, and only submit images you are authorized to edit and comfortable sending to Media.io with your API key.

A.I.G

Vulnerability Patterns

• Skill Instruction Hijacking: Alters the agent's session goals or safety constraints when the skill loads
• Agent Memory Poisoning: Writes attacker-controlled rules into memory that affect later sessions
• Remote Payload Retrieval and Execution: Fetches external code whose behavior can change after review
• Embedded Malicious Code: Ships malicious scripts inside the skill and executes them locally
• Unauthorized Access and Privilege Escalation: Obtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• MCP Tool Poisoning: Hidden Instructions, Unicode Deception, Parameter Description Injection
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (6)

Hidden Instructions

High

• Category: Prompt Injection
• Confidence: 60% confidence

Finding

Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 1)May include surrounding context.

md

---
name: mediaio-ai-gender-swap
description: Transform photos and images into Studio Ghibli-style artwork using AI via Media.io OpenAPI. Applies the iconic hand-drawn, painterly aesthetic of Ghibli films. AI gender swap, gender change AI, male to female AI.
metadata: {"openclaw": {"homepage": "https://platform.media.io/docs/", "requires": {"bins": ["curl"], "env": ["MEDIAIO_API_KEY"]}, "primaryEnv": "MEDIAIO_API_KEY"}}

Description-Behavior Mismatch

High

• Category: Not specified by scanner
• Confidence: 98% confidence

Finding

The manifest description does not match the actual behavior described in the skill body. In an agent ecosystem, this kind of capability misrepresentation can cause a tool to be selected under false pretenses and process sensitive user images in an unexpected way.

Content

No source excerpt is available for this finding.

Intent-Code Divergence

High

• Category: Not specified by scanner
• Confidence: 99% confidence

Finding

The manifest description says the skill creates Studio Ghibli-style artwork, but the documented endpoints actually perform gender swapping. This mismatch can mislead users and downstream agents into invoking a materially different image transformation than expected, undermining informed consent and safe tool selection.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

• Category: Not specified by scanner
• Confidence: 95% confidence

Finding

The skill promotes gender transformation of portraits but does not clearly document consent requirements or restrictions on editing images of real people. That creates misuse risk for harassment, impersonation, or non-consensual synthetic-image creation involving identifiable individuals.

Content

No source excerpt is available for this finding.

Missing User Warnings

Medium

• Category: Not specified by scanner
• Confidence: 94% confidence

Finding

The skill instructs the agent to send user-supplied image URLs to Media.io and later return generated result URLs, but it does not clearly warn users that their content is transmitted to and processed by a third-party service. This weakens transparency and can lead to privacy violations, especially for personal or identifying photos.

Content

No source excerpt is available for this finding.

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 60% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 105)May include surrounding context.

5. Stop when status is completed or failed.
6. Return output URLs from data.result when completed.

cURL Examples

Query Credits

bash