img2Cartoon
通过百度 API 将图片转换为卡通风格。当用户提到卡通化、图片转卡通、卡通风、漫画风时使用。
Invalid
This skill can't be scored yet
Validation errors are blocking scoring. Review and fix them to unlock Quality, Impact and Security scores. See what needs fixing →
High
W007: Insecure credential handling detected in skill instructions.
What this means
The skill handles credentials insecurely by requiring the agent to include secret values verbatim in its generated output. This exposes credentials in the agent’s context and conversation history, creating a risk of data exfiltration.
Why it was flagged
The skill requires the user/agent to supply client_api and client_secret as function arguments (and the example shows literal API/secret strings), which forces the LLM to handle and potentially emit those secret values verbatim when constructing requests or code.
- Repository
- CoderWanFeng/python-office
- Commit
dd6fe56
- Audited
- Security analysis
Is this your skill?
If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.