Scan Report
0 /100
image-to-3d-pipeline
一键将商品图片转换为高质量3D模型的自动化流水线（图片预处理 → AI增强 → 3D生成）
This is a documentation-only skill describing an image-to-3D pipeline with no executable code, presenting no security risks.
Safe to install
This skill is safe to use. It consists only of documentation describing how to call external APIs (Replicate, remove.bg, upscale.ai) for image processing and 3D model generation.
10 findings
Medium External URL 外部 URL
https://replicate.com/baaas/triposr SKILL.md:33 Medium External URL 外部 URL
https://www.remove.bg/api SKILL.md:38 Medium External URL 外部 URL
https://upscale.ai/ SKILL.md:42 Medium External URL 外部 URL
https://api.replicate.com/v1/predictions SKILL.md:71 Medium External URL 外部 URL
https://api.replicate.com/v1/predictions/pred_abc123 SKILL.md:93 Medium External URL 外部 URL
https://replicate.delivery/... SKILL.md:102 Medium External URL 外部 URL
https://api.remove.bg/v1.0/removebg SKILL.md:113 Medium External URL 外部 URL
https://your-processed-image-url.png SKILL.md:128 Medium External URL 外部 URL
https://api.meshy.ai/v2/image-to-3d/$TASK_ID SKILL.md:137 Medium External URL 外部 URL
https://api.meshy.ai/v2/image-to-3d SKILL.md:179 File Tree
2 files · 5.1 KB · 210 lines Markdown 1f · 202L
JSON 1f · 8L
├─
package.json
JSON
└─
SKILL.md
Markdown
Security Positives
✓ Documentation-only skill with no executable code files
✓ No scripts or binaries present in the skill
✓ All API calls described are to legitimate third-party services (Replicate, remove.bg, upscale.ai)
✓ API keys are legitimately required for the documented service functionality
✓ No obfuscation, base64, or suspicious patterns detected
✓ No credential harvesting beyond what is necessary for the documented service
✓ SKILL.md and _meta.json metadata are consistent with described behavior