Skill Trust Decision
agnes-image-gen
SKILL.md文档中硬编码了疑似真实API密钥sk-8Rzd2yCbFzOi1vxojseH8C5D8w3u4aMdNWsPNzxk0G7339Cz，存在凭证暴露风险，文档声明与实际行为存在差异。
Most direct threat evidence
High Credential Theft
文档中硬编码疑似真实API密钥 SKILL.md第47行暴露了疑似真实API密钥'sk-8Rzd2yCbFzOi1vxojseH8C5D8w3u4aMdNWsPNzxk0G7339Cz'，格式符合标准API Key规范。如为真实密钥，则任何查看此文档的人均可使用该凭证。
SKILL.md:47 Why this conclusion was reached
2/4 dimensions flagged Pass
Declared vs actual capability
Declared resources and inferred behavior are broadly aligned.
Block
Hidden execution and egress
3 high-risk artifacts or egress signals were extracted.
Block
Attack chain and severe findings
The report includes 0 attack-chain steps and 1 severe findings.
Review
Dependencies and supply chain hygiene
Dependency information is incomplete, so supply-chain confidence stays limited.
What drove the risk score up
文档凭证暴露 +20
SKILL.md:47行硬编码疑似真实API密钥sk-8Rzd2yCbFzOi1vxojseH8C5D8w3u4aMdNWsPNzxk0G7339Cz
文档欺骗 +10
文档声称'内置默认Key'但实际是硬编码暴露凭证
无执行代码 +-5
仅有文档无脚本文件，静态分析无代码执行风险
Most important evidence
High Credential Theft
文档中硬编码疑似真实API密钥
SKILL.md第47行暴露了疑似真实API密钥'sk-8Rzd2yCbFzOi1vxojseH8C5D8w3u4aMdNWsPNzxk0G7339Cz'，格式符合标准API Key规范。如为真实密钥，则任何查看此文档的人均可使用该凭证。
SKILL.md:47 将示例密钥替换为明显虚构的占位符（如sk-XXXX...），或使用随机生成的假密钥格式作为示例
Medium Doc Mismatch
文档声明与实际行为存在差异
文档描述'技能内置了一个默认API Key，可直接使用'，但实际是将密钥硬编码在文档中暴露给所有用户查看。这不是正常的技术实现方式，而是凭证暴露行为。
SKILL.md:18 如需提供默认Key，应通过安全渠道（如加密配置文件或环境变量注入），而非在公开文档中暴露
Declared capability vs actual capability
Network Pass
Declared READ
→ Inferred READ
SKILL.md:89 curl调用apihub.agnes-ai.com Filesystem Pass
Declared WRITE
→ Inferred WRITE
SKILL.md:138 使用urllib下载图片到本地 Suspicious artifacts and egress
Critical API Key
sk-8Rzd2yCbFzOi1vxojseH8C5D8w3u4aMdNWsPNzxk0G7339Cz SKILL.md:47
High API Key
API_KEY = "your-api-key-here" SKILL.md:29
High API Key
API_KEY="your-api-key-here" SKILL.md:32
Medium External URL
https://agnes-ai.com SKILL.md:50
Medium External URL
https://apihub.agnes-ai.com/v1/images/generations SKILL.md:98
Medium External URL
https://apihub.agnes-ai.com/v1/images/edits SKILL.md:119
Dependencies and supply chain
There are no structured dependency warnings.
File composition
1 files · 490 lines
Markdown 1 files · 490 lines
Files of concern · 1
SKILL.md 文档中硬编码疑似真实API密钥 · 文档声明与实际行为存在差异 · sk-8Rzd2yCbFzOi1vxojseH8C5D8w3u4aMdNWsPNzxk0G7339Cz · API_KEY = "your-api-key-here" · API_KEY="your-api-key-here" · https://agnes-ai.com · https://apihub.agnes-ai.com/v1/images/generations · https://apihub.agnes-ai.com/v1/images/edits
Security positives
无脚本文件，不存在代码执行风险
文档功能描述清晰，无未声明的敏感操作
未发现远程代码执行、凭证收割或数据外泄行为