flyworks-avatar-video
Fail
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: HIGHCREDENTIALS_UNSAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [CREDENTIALS_UNSAFE]: The
scripts/hifly_client.pyfile includes a hardcoded API token (2aeda3bcefac46a3) that serves as a default authentication credential for the Flyworks service. - [INDIRECT_PROMPT_INJECTION]: The skill exposes a mechanism for reading local files and transmitting them to an external vendor API, which creates a vulnerability surface for data exfiltration.
- Ingestion points: The tool
scripts/hifly_client.pyaccepts local file paths for images and audio through command-line arguments defined in the skill instructions. - Capability inventory: The
upload_filefunction in the client script reads file content from the local disk and executes an HTTP PUT request to thehfw-api.hifly.ccdomain. - Boundary markers: The skill lacks delimiters or instructions to prevent the agent from interpreting content within uploaded files as instructions.
- Sanitization: The implementation does not restrict file access to specific directories or validate file content types, allowing for the potential unauthorized access and upload of sensitive configuration or identity files if the agent is misled by a malicious prompt.
Recommendations
- AI detected serious security threats
Audit Metadata