Security audit

AI 海报生成与编辑｜商业美术与版式系统

Security checks for vulnerabilities and agentic risk

Overview

This looks like a legitimate AI poster tool, but it handles API keys and file transfers in ways that are broader and less protected than its documentation clearly discloses.

Install only if you trust the AI Hive service and are comfortable uploading the selected poster assets. Use a virtual environment, avoid entering real API keys directly in shell commands, prefer an environment variable or safer secret input, and treat generated downloads as untrusted files until verified.

A.I.G

Vulnerability Patterns

Insecure DependenciesIntroduces malicious components through unsafe dependency sources
Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review

Findings (3)

T08 · Insecure Dependencies

Warning

Location: SKILL.md:171
Finding: Unpinned third-party dependency installation
Content: View full analysis
Remediation: View remediation

T09 · Insecure Skill Coding Practices

Warning

Location: SKILL.md:172
Finding: API key exposed through command-line arguments
Content: View full analysis
Remediation: View remediation

T09 · Insecure Skill Coding Practices

Warning

Location: scripts/poster_system.py:275
Finding: API-provided upload and download URLs are not restricted to trusted hosts
Content: View full analysis
Remediation: View remediation

SkillSpector

Vulnerability Patterns

MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (3)

Undeclared Tool Scope

Medium

Category: MCP Least Privilege
Confidence: 93% confidence
Finding: The skill invokes shell commands, reads local files, writes outputs, uses environment variables, and makes outbound network requests, but it does not declare an explicit permission or allowed-tools boundary. That creates an over-privileged execution model where an agent may grant broader capabilities than necessary, increasing the risk of unintended file access, command execution, or data exfiltration if the skill is misused or later modified.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 92% confidence
Finding: The manifest description explicitly emphasizes Chinese poster layouts as part of when the skill should be used, which imposes a language/locale preference in natural-language guidance. There is no accompanying opt-in, alternative language option, or justification that this skill is limited to a China-specific compliance context.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 98% confidence
Finding: This code file contains natural-language strings that force a specific language/locale for the interface and error messages. Under the policy, locale constraints should either be optional for the user or clearly documented as justified for a region-specific tool, which is not present here.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.