Cake Decor Video

• Outcome: Pass
• Latest audit: May 29, 2026 at 8:26 PM UTC
• Version:
  0.1.0

Overview

This is a disclosed WeryAI cake-video generator that uses a required API key and paid network calls for its stated purpose.

Install only if you trust the publisher enough to provide a WeryAI API key. Leave WERYAI_BASE_URL and WERYAI_MODELS_BASE_URL unset unless you intentionally use trusted alternate endpoints, and review the confirmation table because successful runs consume paid credits.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

• Confidence: 89% confidence
• Finding: The implicit trigger uses a broad natural-language request in Chinese that describes cake-decorating content without any explicit skill invocation boundary. This can cause over-triggering, where the agent invokes the skill for loosely related prompts, reducing routing precision and potentially causing unintended tool use in normal conversation.

VirusTotal

66/66 vendors flagged this skill as clean.