kling
Pass
Audited by Gen Agent Trust Hub on Sep 6, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to save the API key to
~/.pixazo/api-keyand executechmod 600on the file to secure it. This is a standard security practice for managing local credentials. - [EXTERNAL_DOWNLOADS]: The skill fetches documentation and polling reference data from
https://www.pixazo.ai/models/kling.md. As this is the vendor's official domain for the service provided, this is expected behavior. - [CREDENTIALS_UNSAFE]: The skill specifically avoids hardcoding keys and provides a secure mechanism for users to provide their own keys, which are then stored locally in a hidden, permission-restricted directory.
Audit Metadata