ClawHub
Back to skill

Security audit

通义万相 图片生成替代｜AI 图片生成与编辑

Security checks across malware telemetry and agentic risk

Overview

This skill is a disclosed AI Hive image-generation helper that uses a user-provided API key and selected image files for its stated purpose.

Install this only if you intend to use AI Hive for image generation and are comfortable uploading chosen reference images and prompts to that service. Prefer a dedicated AI Hive API key, review the broad trigger wording if you use many image skills, and remove ~/.ai-hive/config.json if you no longer want the key stored locally.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (5)

Lp3

Medium
Category
MCP Least Privilege
Confidence
70% confidence
Finding
Without declared permissions the skill's intent is opaque and cannot be validated.

Vague Triggers

Medium
Confidence
84% confidence
Finding
The manifest description says to use the skill when users search terms like '中文海报', '电商图片', and '图生图', which are broad categories of common user requests rather than narrowly scoped invocation phrases. It does not provide exclusion conditions or negative examples, so the trigger scope for when this migration skill should activate versus a generic image skill is ambiguous.

Natural-Language Policy Violations

Medium
Confidence
95% confidence
Finding
The module docstring and all user-facing instructions in this skill are written only in Chinese, and the CLI prompts/messages throughout the file assume Chinese as the required interaction language. The policy requires flagging language or locale constraints when the skill forces a specific language without user opt-in or an explicitly justified regional limitation.

Env Variable Harvesting

High
Category
Data Exfiltration
Content
def _resolve_api_key(self, cli_key):
        if cli_key:
            return cli_key
        env_key = os.environ.get("AI_HIVE_API_KEY")
        if env_key:
            return env_key
        file_config = self._read_config_file()
Confidence
70% confidence
Finding
Code accesses environment variables that may contain secrets (API keys, tokens). This is a common pattern for credential theft.

Env Variable Harvesting

High
Category
Data Exfiltration
Content
def _try_read_existing_api_key():
    """安全读取已配置的 API Key，失败返回 None。"""
    env_key = os.environ.get("AI_HIVE_API_KEY")
    if env_key:
        return env_key
    try:
Confidence
70% confidence
Finding
Code accesses environment variables that may contain secrets (API keys, tokens). This is a common pattern for credential theft.

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.