Data security & privacy review

Is blcaptain-style-skill safe?

Agent  dososo/blcaptain-style-skill

agent-skillclaude-skillcodex-skillsocial-cardvisual-generationwechat-coverxiaohongshu

What is blcaptain-style-skill?

中文图文卡片生成 Skill:一段内容 → 海报级图文组图(小红书 3:4 / 公众号封面)。1 引擎 + 3 视觉语言(静纸 Still Paper / 实证 Signal Proof / 图桥 Bridge Canvas),智能驱动 + 独家影像配方。

Type: Agent License: NOASSERTION Source: repository ↗

Data-security signals

Public, checkable facts about blcaptain-style-skill — they show the risk surface, not what it does with your data at runtime.

  • Open-source — the NOASSERTION-licensed code is publicly auditable on its public repository.
  • High access surface — as an AI agent, it can run with your keys, files, environment and network.
  • Maintenance — actively published.
  • ?
    Independent exfiltration test — not yet independently tested by Oxavion.

Is blcaptain-style-skill safe? The honest answer.

The signals above show what blcaptain-style-skill can reach. But no public metadata reveals what it actually does with your data once it runs — that only shows up when you watch it in a sandbox. Oxavion runs blcaptain-style-skill with planted canary secrets and watches every outbound channel, then emails you the evidence.

✓ Request received — we'll run the scan and email your report shortly.

We scan blcaptain-style-skill in our sandbox and email your report. No install, no access to your systems.

How to tell if blcaptain-style-skill is safe

Before you trust any AI tool with your environment, check:

  1. Is the source auditable? Yes — open-source, you can read it.
  2. Does it need your keys or credentials? Most agents do — so it holds them at runtime.
  3. Does it make outbound network calls, and where to? The repo hints at this; only a run confirms it.
  4. Has it been tested for data exfiltration? Not yet — this is the one you cannot verify from the outside.

The first three you can check from the repo yourself. The last — what it does with your data at runtime — needs a test. That is exactly what an Oxavion scan does →

Frequently asked

Is blcaptain-style-skill safe to use?
It depends on what it does with your data at runtime — something a static look can't settle. Oxavion answers it empirically: we sandbox blcaptain-style-skill, feed it canary secrets and data, and report exactly what (if anything) leaves. Request a free scan for a verdict on the version you run.
How does Oxavion test it?
An isolated gVisor micro-VM, a transparent egress gateway that captures HTTP/S, DNS and raw TCP, planted canary secrets/PII, and encoding-aware detection — aligned to OWASP LLM Top 10 and MITRE ATLAS, calibrated to zero false-negatives / zero false-positives.

Related Agents