Security audit

Piccc AI Skills

Security checks across malware telemetry and agentic risk

Overview

This skill connects to Piccc AI to generate and download media, with disclosed account authorization and local credential storage.

Install this if you intend to let your agent use your Piccc AI account and credits for media generation. Review generated-task costs, authorize only in the browser flow you expect, and use logout if you want to remove the saved local API key.

SkillSpector

By NVIDIA

Vulnerability Patterns

Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

Detected: suspicious.dangerous_exec, suspicious.env_credential_access, suspicious.exposed_secret_literal (+1 more)

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: scripts/piccc.mjs:640

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: test/skills.test.mjs:284

Environment variable access combined with network send.

Critical

Code: suspicious.env_credential_access
Location: scripts/piccc.mjs:165

Environment variable access combined with network send.

Critical

Code: suspicious.env_credential_access
Location: test/skills.test.mjs:285

File appears to expose a hardcoded API secret or token.

Critical

Code: suspicious.exposed_secret_literal
Location: test/skills.test.mjs:69

Sensitive-looking file read is paired with a network send.

Warn

Code: suspicious.potential_exfiltration
Location: scripts/piccc.mjs:678

Sensitive-looking file read is paired with a network send.

Warn

Code: suspicious.potential_exfiltration
Location: test/skills.test.mjs:238