Skill Trust Decision
dlazy-video-image-replicate
纯文档型技能，无代码文件可审计；声称是外部SaaS的thin client，但无法验证声明属实。
Why this conclusion was reached
1/4 dimensions flagged Block
Declared vs actual capability
2 undeclared or violating capabilities were inferred.
Review
Hidden execution and egress
4 lower-risk artifacts were extracted and still need context.
Pass
Attack chain and severe findings
There is no explicit malicious chain in the report.
Review
Dependencies and supply chain hygiene
1 dependency or supply-chain issues need attention.
What drove the risk score up
无可审计代码 +15
纯文档型skill，无scripts/目录，声称thin client但无代码验证
声称与限制不符 +10
文档声称不访问本地文件系统，但--files参数会读取并上传本地文件
Most important evidence
Medium Doc Mismatch
纯文档型skill无可审计代码
SKILL.md声称是'thin client'调用外部API，但整个skill包中没有任何代码文件（无scripts/、无.py/.js文件），无法验证其实际行为是否与声明一致。文档本身成了唯一可审查对象。
SKILL.md:1 要求作者提供完整代码包，或指向可信代码托管地址（如npm官方包地址）
Low Doc Mismatch
声称不访问本地资源但实际会读取文件
文档声称'此技能本身不会越权访问网络或文件系统'，但使用--files参数时需要读取并上传本地文件。这是轻微的声明-行为差异。
SKILL.md:1 澄清文档：技能通过npm CLI间接访问本地文件系统
Low Supply Chain
依赖外部npm包@dlazy/cli
此skill依赖npm包@dlazy/[email protected]，无独立代码，行为完全取决于外部包。没有scripts/目录，供应链风险转移到npm包本身。
SKILL.md:1 建议从官方npm仓库安装前检查包签名和元数据
Info Sensitive Access
API密钥存储到本地配置
dlazy login/auth set会将API key写入~/.dlazy/config.json。虽声称权限受限，但任何本地代码都可以读取此文件。
SKILL.md:1 使用环境变量DLAZY_API_KEY替代持久化存储
Declared capability vs actual capability
Filesystem Block
Declared NONE
→ Inferred READ
SKILL.md: --files参数读取本地文件 Network Pass
Declared READ
→ Inferred READ
SKILL.md: api.dlazy.com, files.dlazy.com Shell Block
Declared NONE
→ Inferred WRITE
SKILL.md: npm/npx命令执行 Suspicious artifacts and egress
Medium External URL
https://www.npmjs.com/package/@dlazy/cli SKILL-cn.md:5
Medium External URL
https://dlazy.com SKILL-cn.md:46
Medium External URL
https://dlazy.com/dashboard/organization/api-key SKILL-cn.md:47
Medium External URL
https://dlazy.com/dashboard/organization/settings?tab=credits SKILL-cn.md:126
Dependencies and supply chain
| Package | Version | Source | Known vuln | Notes |
|---|---|---|---|---|
| @dlazy/cli | 1.2.3 | npm | No | 无本地代码，依赖外部包 |
| npm/npx | * | system | No | 系统依赖 |
File composition
2 files · 262 lines
Markdown 2 files · 262 lines
Files of concern · 2
SKILL.md 纯文档型skill无可审计代码 · 声称不访问本地资源但实际会读取文件 · 依赖外部npm包@dlazy/cli · API密钥存储到本地配置
SKILL-cn.md https://www.npmjs.com/package/@dlazy/cli · https://dlazy.com · https://dlazy.com/dashboard/organization/api-key · https://dlazy.com/dashboard/organization/settings?tab=credits
Security positives
文档结构清晰，声明完整
API端点明确（api.dlazy.com, files.dlazy.com）
npm包版本锁定到1.2.3
提供多语言文档（EN/CN）
错误处理文档详细