Security audit

GPT Image 2 文生图

Security checks for vulnerabilities and agentic risk

Overview

The skill does generate images as described, but a download-path flaw could let an unsafe API response write files outside the chosen output folder.

Install only if you trust AI Hive and are comfortable storing an API key locally. Use a virtual environment for dependencies, avoid running the tool with elevated privileges, and choose an output directory where unintended file writes would have limited impact until the filename-containment issue is fixed.

A.I.G

Vulnerability Patterns

Insecure DependenciesIntroduces malicious components through unsafe dependency sources
Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review

Findings (2)

T08 · Insecure Dependencies

Note

Location: SKILL.md:69
Finding: Unpinned Third-Party Dependency Installation
Content: View full analysis
Remediation: View remediation

T09 · Insecure Skill Coding Practices

Warning

Location: scripts/imagegen.py:263
Finding: Output Path Traversal Through Unsanitized API Response Fields
Content: View full analysis
Remediation: View remediation

SkillSpector

Vulnerability Patterns

MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (4)

Undeclared Tool Scope

Medium

Category: MCP Least Privilege
Confidence: 92% confidence
Finding: The skill invokes a local Python script, performs package installation, uses file storage for API keys, and makes outbound network requests, yet it declares no explicit tool scope or permission boundaries. This can lead to overbroad agent execution privileges, making unintended shell, filesystem, environment, or network access harder to constrain or audit.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 94% confidence
Finding: The manifest description and main instructions are written as prescriptive Chinese-language guidance, and the title explicitly labels the skill in Chinese without any indication that other languages are supported. This can violate a language/locale policy when a skill imposes a specific language without user opt-in or an explicit regional justification.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 80% confidence
Finding: The changelog entries are written entirely in Chinese, which can indicate a language-specific skill experience without any visible opt-in or explanation of locale scope. Under the policy, forcing a specific language without user choice can be a natural-language policy concern.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 89% confidence
Finding: The example placeholder value uses Chinese text ('请替换为你的APIKey') in a config file without any indication that the skill is region-specific or that users may choose another language. This can violate language/locale policy guidance because it implicitly enforces a specific language in user-facing material.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.