Security audit
Security checks for vulnerabilities and agentic risk
This skill is a disclosed YouCam-based hair recommendation and try-on workflow, with privacy and API-key cautions but no artifact-backed malicious behavior.
Install only if you are comfortable sending selfies, face-shape, skin-tone, and hair try-on data to YouCam/Perfect Corp and spending API credits. Store the API key securely, prefer an environment variable over credentials.json, use only user-approved images or trusted URLs, and keep analysis parameters limited to what the hair recommendation needs.
requirements:
credentials:
- name: YOUCAM_API_KEY
source: env | credentials.json (in the skill root, next to SKILL.md)
network:
- yce-api-01.makeupar.com
apis:requirements:
credentials:
- name: YOUCAM_API_KEY
source: env | credentials.json (in the skill root, next to SKILL.md)
network:
- yce-api-01.makeupar.com
apis:requirements:
credentials:
- name: YOUCAM_API_KEY
source: env | credentials.json (in the skill root, next to SKILL.md)
network:
- yce-api-01.makeupar.com
apis:requirements:
credentials:
- name: YOUCAM_API_KEY
source: env | credentials.json (in the skill root, next to SKILL.md)
network:
- yce-api-01.makeupar.com
apis:requirements:
credentials:
- name: YOUCAM_API_KEY
source: env | credentials.json (in the skill root, next to SKILL.md)
network:
- yce-api-01.makeupar.com
apis:requirements:
credentials:
- name: YOUCAM_API_KEY
source: env | credentials.json (in the skill root, next to SKILL.md)
network:
- yce-api-01.makeupar.com
apis:requirements:
credentials:
- name: YOUCAM_API_KEY
source: env | credentials.json (in the skill root, next to SKILL.md)
network:
- yce-api-01.makeupar.com
apis:requirements:
credentials:
- name: YOUCAM_API_KEY
source: env | credentials.json (in the skill root, next to SKILL.md)
network:
- yce-api-01.makeupar.com
apis:(or custom pattern + palettes; ombre needs blend_strength / line_offset — see the doc). 5. The generation returns a result image URL in `data.results.url`. ## Output rules * **Return the result image URL exactly as given** (hyperlink is OK; do not modify it). * Explain the recommendation (face shape → style, skin tone → color). * **Always end with this note:** "This preview image is AI-generated and for reference only;
print(f"[setup] virtual environment already exists at {_VENV_DIR}")
else:
print(f"[setup] creating virtual environment at {_VENV_DIR} ...")
subprocess.run([sys.executable, "-m", "venv", _VENV_DIR], check=True)
venv_python = _venv_python(_VENV_DIR)
print(f"[setup] installing dependencies from {_REQUIREMENTS} ...")venv_python = _venv_python(_VENV_DIR)
print(f"[setup] installing dependencies from {_REQUIREMENTS} ...")
subprocess.run([venv_python, "-m", "pip", "install", "--upgrade", "pip"], check=True)
subprocess.run([venv_python, "-m", "pip", "install", "-r", _REQUIREMENTS], check=True)
activate_hint = (venv_python = _venv_python(_VENV_DIR)
print(f"[setup] installing dependencies from {_REQUIREMENTS} ...")
subprocess.run([venv_python, "-m", "pip", "install", "--upgrade", "pip"], check=True)
subprocess.run([venv_python, "-m", "pip", "install", "-r", _REQUIREMENTS], check=True)
activate_hint = (
rf"{_VENV_DIR}\Scripts\activate" if os.name == "nt" else f"source {_VENV_DIR}/bin/activate"No suspicious patterns detected.