aliyun-happyhorse-r2v
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns or security risks were identified. The skill follows best practices for integrating with external AI services.
- [DATA_EXPOSURE_AND_EXFILTRATION]: The skill correctly manages credentials by using environment variables (DASHSCOPE_API_KEY) or standard Alibaba Cloud configuration files (~/.alibabacloud/credentials). It communicates exclusively with well-known official domains (dashscope.aliyuncs.com).
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied prompts and image URLs as input for video generation. This is the primary intended function of the skill and represents a standard injection surface common to all prompt-based AI tools.
- [EXTERNAL_DOWNLOADS]: The skill requires the standard, well-known 'requests' library for HTTP communication, which is a safe and expected dependency.
Audit Metadata