kling-cli

Warn

Audited by Snyk on Oct 15, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (medium risk: 0.30). The skill documents a CLI tool (kling) that interfaces with Kling AI to perform generative tasks like image and video generation. These generative tasks consume credits ("灵感值"), and the documentation notes that submission commands incur costs (SKILL.md:319-320). However, the skill only provides generation and account inquiry commands (text_to_image, image_to_video, account, etc.) without handling any direct payments, balance reloads, or purchases itself; billing/recharge is explicitly redirected to a dynamic URL provided by the service backend (SKILL.md:406-409). Therefore, the operation is indirect (submitting billable generation tasks and pointing users to external membership/recharge links).

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Oct 15, 2026, 09:54 PM
Issues
1