klingai-prod-checklist

Pass

Audited by Gen Agent Trust Hub on Sep 9, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill promotes secure development practices by instructing users to store credentials in secrets managers rather than version-controlled files, and to implement quarterly key rotation.
  • [DATA_EXPOSURE_AND_EXFILTRATION]: The automated validator script in references/automated-checklist-validator.md retrieves the KLINGAI_API_KEY from environment variables and makes a request to https://api.klingai.com/v1/account. This is a legitimate connectivity and credit balance check targeting the official Kling AI API domain.
  • [INDIRECT_PROMPT_INJECTION]: The skill explicitly includes content safety guidelines in SKILL.md, such as validating user prompts, sanitizing input, and implementing content moderation layers to prevent malicious prompt injection in the final application.
  • [COMMAND_EXECUTION]: The skill contains Python code snippets for connection pooling and smoke testing. These scripts perform standard networking tasks and use established libraries like requests to interact with the service provider's API.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 9, 2026, 03:46 AM
Security Audit — agent-trust-hub — klingai-prod-checklist