Security audit

即梦 Dreamina 视频生成替代｜AI 视频生成与编辑

Security checks for vulnerabilities and agentic risk

Overview

This skill is a disclosed AI Hive video-generation helper with one real file-download hardening issue, but its network use, credential use, uploads, and local downloads match its stated purpose.

Install only if you are comfortable sending prompts, API credentials, and selected media files to AI Hive. Use a virtual environment, consider pinning requests yourself, keep the API key private, and choose a non-sensitive output directory because the current downloader should be hardened to sanitize server-provided task types before saving files.

A.I.G

Vulnerability Patterns

Insecure DependenciesIntroduces malicious components through unsafe dependency sources
Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review

Findings (2)

T09 · Insecure Skill Coding Practices

Warning

Location: scripts/videogen.py:351
Finding: Server-Controlled Task Type Allows Output Path Traversal
Content: View full analysis
Remediation: View remediation

T08 · Insecure Dependencies

Note

Location: SKILL.md:53
Finding: Unpinned Third-Party Dependency Installation
Content: View full analysis
Remediation: View remediation

SkillSpector

Vulnerability Patterns

Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access

Findings (3)

Undeclared Tool Scope

Medium

Category: MCP Least Privilege
Confidence: 92% confidence
Finding: The skill invokes a local Python script with network access and file inputs, but it does not declare any tool restrictions or permissions. That mismatch can cause the host agent to grant broader capabilities than users expect, increasing the risk of unintended shell execution, file access, or outbound requests to the hardcoded API endpoint.
Content: No source excerpt is available for this finding.

Vague Triggers

Medium

Category: Not specified by scanner
Confidence: 87% confidence
Finding: The manifest description says to use the skill when users search terms like “即梦 API”, “广告”, and other broad video-generation intents, but it does not clearly bound when the skill should and should not activate. Because the trigger scope is expressed as an open-ended list of common request topics without exclusion conditions, it risks unintended invocation for general video-creation requests.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 95% confidence
Finding: The module docstring and all user-facing prompts/messages are written only in Chinese, presenting the skill as Chinese-only behavior. The file does not offer a language/locale choice or document a justified region-specific language constraint, which matches the language-policy violation criteria.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.