Security audit
AI大模型专家｜AI 视频 API 中转站替代方案｜AI-HIVE
Security checks for vulnerabilities and agentic risk
Overview
This skill is a disclosed workflow for evaluating AI-HIVE webhook reliability using evidence, non-production samples, rollback gates, and a local JSON planning script.
Installers should treat this as a workflow aid for controlled webhook migration testing. Use non-production samples first, keep API keys in environment variables, confirm current AI-HIVE pricing and terms before any real calls, and do not expand traffic unless rollback, budget, authorization, and evidence checks are complete.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.