Security audit

美甲制作过程视频

Security checks for vulnerabilities and agentic risk

Overview

The skill appears to be a WeryAI video-generation helper with expected API-key and network use, though its bundled client is broader than the nail-art framing.

Install only if you trust the publisher and WeryAI, and are comfortable providing WERYAI_API_KEY. Treat prompts, image URLs, and generation parameters as data sent to an external provider; use a dedicated key if possible and confirm requests because generation may consume credits.

SkillSpector

Vulnerability Patterns

MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access

Findings (2)

Lp3

Medium

Category: MCP Least Privilege
Confidence: 85% confidence
Finding: The skill invokes a Node.js script that depends on an API key and external video-generation service, indicating environment-variable access and network use, yet no corresponding permissions are declared. This creates a transparency and consent problem: users and reviewers cannot easily assess that the skill can access secrets and send prompts or other data off-platform.

Tp4

High

Category: MCP Tool Poisoning
Confidence: 92% confidence
Finding: The skill is presented as a narrowly scoped nail-art video generator, but the described behavior indicates it functions as a more general WeryAI video client with text-to-video, image-based generation, model discovery, and task polling. That scope expansion is dangerous because it can bypass user expectations and policy review, enabling broader external API usage than the description suggests.

Static analysis

Detected: suspicious.env_credential_access

Environment variable access combined with network send.

Critical

Code: suspicious.env_credential_access
Location: scripts/video_gen.js:22