Security audit
Grok Image API
Security checks across malware telemetry and agentic risk
Overview
This skill is a straightforward helper for calling image generation/editing APIs with a user-provided key and saving the returned image locally.
Before installing, use a dedicated API key if possible, verify that IMAGE_API_BASE_URL points to a provider you trust, avoid sending private images unless you accept that provider's handling, and choose an output path where local image writes or overwrites are acceptable.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
65/65 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.