Media.io Vidu Video Generator

• Outcome: Review
• Latest audit: Sep 12, 2026 · 7:18 AM UTC
• Version: 1.0.1

Overview

The skill appears to do what it claims, but its API-key handling has a credible redirect-related exposure risk users should review before installing.

Install only if you are comfortable sending prompts, image URLs, generation settings, and a Media.io API key to Media.io. Use a scoped or low-credit API key if possible, avoid confidential or regulated content, and consider fixing the router to disable redirects before using it with a valuable key.

A.I.G

Vulnerability Patterns

• Insecure Skill Coding Practices: Finds exploitable flaws such as hardcoded secrets or command injection
• Skill Instruction Hijacking: Alters the agent's session goals or safety constraints when the skill loads
• Agent Memory Poisoning: Writes attacker-controlled rules into memory that affect later sessions
• Remote Payload Retrieval and Execution: Fetches external code whose behavior can change after review
• Embedded Malicious Code: Ships malicious scripts inside the skill and executes them locally

Findings (1)

T09 · Insecure Skill Coding Practices

Warning

• Location: scripts/skill_router.py:51

Finding

API Key Disclosure Through Cross-Origin HTTP Redirects

Content

View full analysis

Remediation

View remediation

SkillSpector

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (7)

Missing User Warnings

Medium

• Category: Not specified by scanner
• Confidence: 95% confidence

Finding

The skill clearly integrates with Media.io OpenAPI, but the documentation does not warn users that prompts and uploaded images will be transmitted to an external third-party service for processing. This can lead to unintentional disclosure of sensitive data, especially if users assume processing is local or only within the agent environment.

Content

No source excerpt is available for this finding.

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 60% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · scripts/c_api_doc_detail.json (reported line 12)May include surrounding context.

json

"description": "API to query user credits balance.",
    "api_header": "{\"list\": [{\"name\": \"X-API-KEY\", \"value\": \"API key to authorize requests\"}, {\"name\": \"Content-Type\", \"value\": \"application/json\"}], \"title\": \"Authorizations\", \"describe\": \"Add the following authorization information in the request header\"}",
    "api_body": "{\"title\": \"Request Body\", \"category\": [{\"list\": [], \"title\": \"Query Credits\", \"describe\": \"Request body to query user credits balance\"}]}",
    "api_request_demo": "{\"title\": \"Example Request\", \"request\": [{\"title\": \"Query User Credits\", \"language\": \"cURL\", \"code_example\": \"curl --request POST \\n  --url https://openapi.media.io/user/credits \\n  --header 'Content-Type: application/json' \\n  --header 'X-API-KEY: <api-key>' \\n  --data '{}'\"}]}",
    "api_response": "{\"list\": [{\"name\": \"code\", \"type\": \"integer\", \"describe\": \"Response status code, 0 indicates success\"}, {\"name\": \"msg\", \"type\": \"string\", \"describe\": \"Response message, empty string on success\"}, {\"name\": \"data\", \"type\": \"object\", \"describe\": \"Response data object\"}, {\"name\": \"credits\", \"type\": \"integer\", \"describe\": \"User credits balance, located within the data object\"}], \"title\": \"Response\", \"describe\": \"After the request is successfully processed, the server will return the following response\"}",
    "api_code_demo": "{\"list\": [{\"code\": \"0\", \"describe\": \"Success\"}, {\"code\": \"40001\", \"describe\": \"Invalid API key\"}, {\"code\": \"40002\", \"describe\": \"API key expired\"}], \"title\": \"Status Code\"}",
    "content": null,

Missing User Warnings

Medium

• Category: Not specified by scanner
• Confidence: 92% confidence

Finding

The Vidu Q2 entry documents submitting an image URL and prompt to https://openapi.media.io/generation/vidu/i2v-vidu-q2, but there is no user-facing disclosure that potentially sensitive user content is transmitted off-system for processing. Because this file is a JSON documentation/manifest file, SQP-2 applies to missing warnings about privacy-impacting behavior.

Content

No source excerpt is available for this finding.

Missing User Warnings

Medium

• Category: Not specified by scanner
• Confidence: 92% confidence

Finding

The Vidu Q3 image-to-video entry describes uploading user-controlled content and parameters, including image URL, prompt, and audio-generation options, to a remote generation endpoint, but it does not disclose the privacy implications of that transfer. This is a documentation omission affecting user awareness of external processing.

Content

No source excerpt is available for this finding.

Missing User Warnings

Medium

• Category: Not specified by scanner
• Confidence: 90% confidence

Finding

The text-to-video entry documents sending prompts and generation preferences to a remote API endpoint but does not warn users that their text inputs will leave the local environment and be processed by an external provider. That is a missing privacy disclosure under SQP-2 for this manifest/documentation file.

Content

No source excerpt is available for this finding.

Missing User Warnings

Medium

• Category: Not specified by scanner
• Confidence: 88% confidence

Finding

This code accesses a sensitive credential via API_KEY and sends it to a remote service in the X-API-KEY header. Although the behavior is functionally required, the file provides no user-facing prompt, print/log notice, or explicit warning comment/docstring that credentials will be used and transmitted.

Content

No source excerpt is available for this finding.

Missing User Warnings

Low

• Category: Not specified by scanner
• Confidence: 84% confidence

Finding

This JSON manifest documents outbound HTTP requests that require sending an X-API-KEY header to openapi.media.io, but it provides no warning about handling credentials or the fact that authentication data is transmitted to a third-party endpoint. For markdown and manifest-style documentation, SQP-2 applies when descriptions omit warnings about behaviors affecting privacy or system integrity.

Content

No source excerpt is available for this finding.