Caveat verdict
wuli
AI image and video generation client for the Wuli.art platform using a user-provided WULI_API_TOKEN; all network calls go to the official wuli.art API matching stated purpose.
β Flagged for review β coarse, uncorroborated signal, not a confirmed exploit. Review the config yourself before installing.
Automated static analysis β not a human review. Caveat flags capabilities, not confirmed intent, and can produce false positives. Disagree with this verdict? Use Dispute below.
Findings (3)
Possible hardcoded credential
SKILL.md Β· code Β· TOKEN="wuli-your-token-here
Python urllib.request β network access
references/γεε©WuliγεΌζΎεΉ³ε° API ζζ‘£.md Β· code Β· urllib.request
Python os.environ.get β reads environment variable
skill.py Β· prose Β· downgraded Β· os.environ.get(
Why the tier is capped
Execution sink present in raw bytes (Hard Floor: class D). Final tier capped at Caution β cannot be lifted by any downgrade, example-payload opt-in, or allowlist.
Permissions & capabilities
Requires 1 environment variable. (1 sensitive: WULI_API_TOKEN).
Is this flag fair?
Thanks β recorded.