Security audit

Vidu 视频生成替代｜AI 视频生成与编辑

Security checks for vulnerabilities and agentic risk

Overview

This video-generation skill is coherent, but it needs review because it uploads and downloads media through server-provided URLs without enough validation or download limits.

Install only if you are comfortable sending prompts and selected media files to AI Hive and storing an AI Hive API key locally. Avoid sensitive private media until the publisher adds destination allowlists, HTTPS and redirect validation, content checks, and download size limits.

A.I.G

Vulnerability Patterns

Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally

Findings (1)

T09 · Insecure Skill Coding Practices

Warning

Location: scripts/videogen.py:215
Finding: Unrestricted Server-Controlled Upload and Download Destinations
Content: View full analysis
" raise SystemExit(f"OSS upload failed ({oss_resp.status_code}): {detail}") ``` ```python def download_file(url, out_path, timeout=300): """Stream a file download and display progress.""" print(f"[download] {out_path.name}") try: resp = requests.get(url, stream=True, timeout=timeout) resp.raise_for_status() total = int(resp.headers.get("content-length", 0)) downloaded = 0 with open(str(out_path), "wb") as f: for chunk in resp.iter_content(chunk_size=8192): if chunk: f.write(chunk) downloaded += len(chunk) if total > 0: pct = int(downloaded * 100 / total) bar = "█" * (pct // 5) + "░" * (20 - pct // 5) print(f"\r {bar} {pct}% ({downloaded // 1024}KB)", end="", flush=True) print( ...[truncated 3190 chars]
Remediation: View remediation

SkillSpector

Vulnerability Patterns

MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (2)

Undeclared Tool Scope

Medium

Category: MCP Least Privilege
Confidence: 89% confidence
Finding: The skill invokes local Python scripts that require shell execution, can read/write files, use environment variables, and make network requests, but it does not declare any explicit tool scope or permission boundaries in the manifest. This creates an overbroad and opaque execution surface: a host agent may grant more capability than users expect, and the script could access local data or external services without clear least-privilege constraints.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 91% confidence
Finding: The module-level natural-language description is entirely in Chinese and presents the tool's purpose and usage constraints without offering any language or locale choice. Under the stated policy, forcing a specific language without user opt-in is a natural-language policy violation unless clearly justified as region-specific, which is not documented here.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.