ClawHub
Back to skill

Security audit

Hailuo Ai

Security checks for vulnerabilities and agentic risk

Overview

This is a simple Hailuo/MiniMax video-generation guidance skill with expected API examples and no hidden execution or persistence.

Install only if you are comfortable using MiniMax/Hailuo as an external video-generation provider. Prompts, API requests, and reference image URLs used with the example would be sent to MiniMax, so do not include sensitive personal, biometric, confidential, or proprietary material unless you have appropriate consent and have reviewed the provider’s terms.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (4)

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
88% confidence
Finding

The description and role definition present the skill entirely as a Chinese-language assistant focused on Chinese usage, with no indication that users may choose another language or that the locale restriction is required. The policy requires flagging language or locale constraints unless the skill offers opt-in choice or clearly documents a justified regional limitation.

Content

No source excerpt is available for this finding.

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
94% confidence
Finding

The skill includes an API example that sends user prompts and potentially image URLs to a third-party service, but it does not warn users that their content will leave the local environment or describe privacy implications. In a skill centered on media generation, prompts and reference images may contain sensitive personal, proprietary, or biometric data, so omission of disclosure meaningfully increases privacy and compliance risk.

Content

No source excerpt is available for this finding.

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 78)May include surrounding context.

md
import time

API_KEY = "your_minimax_api_key"
BASE_URL = "https://api.minimaxi.chat/v1"

# 创建视频生成任务
response = requests.post(

External Transmission

Medium
Category
Data Exfiltration
Confidence
95% confidence
Finding

The example code performs an outbound POST request to an external video-generation API and includes user-supplied prompt content in the request body. In context, external transmission is expected for this type of skill, but it is still security-relevant because it can expose sensitive text or linked media to a third party if users are not clearly informed and controls are absent.

Content

Scanner excerpt · SKILL.md (reported line 81)May include surrounding context.

md
BASE_URL = "https://api.minimaxi.chat/v1"

# 创建视频生成任务
response = requests.post(
    f"{BASE_URL}/video_generation",
    headers={"Authorization": f"Bearer {API_KEY}"},
    json={

Static analysis

No suspicious patterns detected.