T09 · Insecure Skill Coding Practices
Warning
- Location
scripts/videogen.py:350- Finding
Unvalidated API Response Fields Permit Output Path Traversal
- Content
View full analysis
- Remediation
View remediation
Security audit
PixVerse 视频生成替代｜AI 视频生成与编辑
Security checks for vulnerabilities and agentic risk
Overview
The skill is mostly a disclosed AI video-generation helper, but its downloader can write server-named output files outside the intended folder if the API response is compromised or malformed.
Review before installing. Use only media you are allowed to upload to AI Hive, keep the API key scoped and replaceable, install dependencies in a virtual environment, and avoid running this skill in directories or accounts where an unexpected downloaded filename could overwrite important files.
Vulnerability Patterns
- Insecure DependenciesIntroduces malicious components through unsafe dependency sources
- Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
- Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
- Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
- Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Findings (2)
T08 · Insecure Dependencies
Note
- Location
SKILL.md:53- Finding
Unpinned Third-Party Dependency Installation
- Content
View full analysis
- Remediation
View remediation
--hash=sha256: ``` 3. Include and hash all transitive dependencies to make installation reproducible. 4. Install dependencies inside a dedicated virtual environment rather than the user's global Python environment. 5. Explicitly use a trusted package index and review any organization-specific mirror configuration. 6. Add automated dependency vulnerability and integrity scanning to the release process. 7. Periodically update pinned versions through a controlled review and testing process. ]]>
Vulnerability Patterns
- Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
- MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (3)
Undeclared Tool Scope
Medium
- Category
- MCP Least Privilege
- Confidence
- 91% confidence
- Finding
The skill exposes executable command examples that use shell, local files, environment variables, package installation, and outbound network access, but it does not declare any explicit tool scope or permission boundaries. This creates unnecessary ambiguity about what the skill may access at runtime and increases the risk of over-privileged execution, especially because it contacts an external API and reads user-supplied media files.
- Content
Vague Triggers
Medium
- Category
- Not specified by scanner
- Confidence
- 85% confidence
- Finding
The description says to use the skill when users search terms such as “特效视频”, “社媒短片”, and “视频生成编辑”, which are broad categories rather than narrowly scoped trigger phrases. Without clearer constraints or exclusion examples, the skill could be invoked for many ordinary video-generation requests beyond the intended PixVerse-alternative migration use case.
- Content
Natural-Language Policy Violations
Medium
- Category
- Not specified by scanner
- Confidence
- 91% confidence
- Finding
The user-facing CLI help says the video description prompt may be provided in Chinese or English only. This imposes a language constraint in natural-language guidance without any opt-in or justification that the skill is limited to those locales, which matches the locale policy violation category.
- Content
Static analysis
No suspicious patterns detected.