Security audit

Veo 视频生成替代｜AI 视频生成与编辑

Security checks for vulnerabilities and agentic risk

Overview

This video-generation skill is purpose-aligned, but it needs review because it stores an API key locally and trusts remote-provided HTTPS upload/download URLs for user media.

Review before installing if your media or API key are sensitive. Prefer `AI_HIVE_API_KEY` or `--api-key` over saving the key, use a virtual environment with pinned dependencies, and only upload media you are comfortable sending through AI Hive and its storage transfer URLs.

A.I.G

Vulnerability Patterns

Insecure DependenciesIntroduces malicious components through unsafe dependency sources
Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review

Findings (2)

T09 · Insecure Skill Coding Practices

Warning

Location: scripts/veo_coverage.py:172
Finding: Unrestricted Server-Controlled Media Transfer Destinations
Content: View full analysis
Remediation: View remediation

T08 · Insecure Dependencies

Note

Location: SKILL.md:95
Finding: Unpinned Third-Party Dependency Installation
Content: View full analysis
Remediation: View remediation

SkillSpector

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (3)

Undeclared Tool Scope

Medium

Category: MCP Least Privilege
Confidence: 88% confidence
Finding: The skill embeds executable shell commands and a Python script that can use environment variables, local files, and outbound network access, but it does not declare any explicit tool restrictions such as permissions or allowed-tools. That mismatch is dangerous because an agent may execute the skill with broader capabilities than the author intended, enabling file access, shell execution, or network requests without clear sandboxing or user visibility.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 92% confidence
Finding: This code file contains user-facing descriptions and error/help text in Chinese, beginning with the module docstring. Under the policy, forcing a specific language without offering a choice or documenting a justified locale restriction is a natural-language policy violation.
Content: No source excerpt is available for this finding.

Missing User Warnings

Medium

Category: Not specified by scanner
Confidence: 90% confidence
Finding: The setup command persists a live API key to disk in a predictable location under the user's home directory. Although the code sets file permissions to 0600, storing credentials locally without an explicit warning or safer default increases the chance of accidental disclosure through backups, dotfile syncing, shared accounts, or compromised local environments.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.