klingai-prod-checklist
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill promotes secure development practices by instructing users to store credentials in secrets managers rather than version-controlled files, and to implement quarterly key rotation.
- [DATA_EXPOSURE_AND_EXFILTRATION]: The automated validator script in
references/automated-checklist-validator.mdretrieves theKLINGAI_API_KEYfrom environment variables and makes a request tohttps://api.klingai.com/v1/account. This is a legitimate connectivity and credit balance check targeting the official Kling AI API domain. - [INDIRECT_PROMPT_INJECTION]: The skill explicitly includes content safety guidelines in
SKILL.md, such as validating user prompts, sanitizing input, and implementing content moderation layers to prevent malicious prompt injection in the final application. - [COMMAND_EXECUTION]: The skill contains Python code snippets for connection pooling and smoke testing. These scripts perform standard networking tasks and use established libraries like
requeststo interact with the service provider's API.
Audit Metadata