klingai-compliance-review

Security and compliance review framework for Kling AI integrations. Use when preparing for audits or reviewing security posture. Trigger with phrases like 'klingai compliance', 'kling ai security review', 'klingai audit prep', 'video generation compliance'.

仓库: jeremylongshore/claude-code-plugins-plus-skills
最近来源活动: 2026年7月17日 22:18
检测到的 SKILL.md 语言: 英语
星标: 2,604
分支: 378

安装方式

默认使用会先检查来源的 Prompt；你也可以切换为直接命令，或下载本地副本。

检查来源文件

决定是否安装前，请先阅读 SKILL.md，以及 SkillsMP 当前展示的配套文件。

返回搜索返回安装

Kling AI Compliance Review

Overview

Security and compliance assessment framework for Kling AI integrations. Covers data handling, credential management, content policy, privacy, and regulatory considerations.

Data Flow Assessment

User Prompt → [Your App] → [Kling AI API] → [Kling GPU Cluster]
                                                     ↓
[Your CDN] ← download ← [Kling CDN (temporary URL)] ← Generated Video

Data Residency

Data	Location	Retention
Prompts	Sent to Kling servers (China/global)	Processing only
Generated videos	Kling CDN (temporary URLs)	~24-72 hours
API keys	Your infrastructure	You control
Audit logs	Your infrastructure	You control

Security Checklist

Credential Security

AK/SK stored in secrets manager (not env files, not code)
Keys rotated quarterly
Separate keys per environment
JWT tokens never logged
Access key prefix logged (first 8 chars only)

# Safe logging pattern
def safe_log_key(access_key: str) -> str:
    return access_key[:8] + "..." + access_key[-4:]

Network Security

All API calls over HTTPS (enforced by base URL)
Webhook endpoints use HTTPS with valid TLS cert
Network egress rules allow api.klingai.com:443
No API keys in query strings (Bearer token in header only)

Input Validation

Prompt length validated (<= 2500 chars)
Image URLs validated before sending
User input sanitized against injection
Content policy pre-filtering active

Output Handling

Kling CDN URLs treated as temporary
Videos downloaded and stored on your infrastructure
Generated content scanned before serving to end users
Video metadata stripped of sensitive info before public delivery

Privacy Assessment

Question	Consideration
Do prompts contain PII?	Filter PII before sending to API
Do images contain faces?	Check consent requirements (GDPR Art. 6)
Are generated videos stored?	Define retention policy
Who has access to generated content?	RBAC on storage layer
Cross-border data transfer?	Kling API servers may be in China

GDPR Considerations

class GDPRCompliantClient:
    """Kling client with GDPR data handling."""

    def __init__(self, base_client, audit_logger):
        self.client = base_client
        self.audit = audit_logger

    def text_to_video(self, prompt: str, data_subject_id: str = None, **kwargs):
        # Log processing activity (GDPR Art. 30)
        self.audit.log("processing_activity", "system", {
            "purpose": "video_generation",
            "data_subject": data_subject_id,
            "legal_basis": "legitimate_interest",
            "data_categories": ["text_prompt"],
            "recipients": ["klingai_api"],
        })

        return self.client.text_to_video(prompt, **kwargs)

    def handle_deletion_request(self, data_subject_id: str):
        """Handle GDPR right to erasure (Art. 17)."""
        # Delete stored videos associated with the data subject
        # Delete audit logs referencing the data subject
        # Note: cannot delete data already sent to Kling API
        self.audit.log("deletion_request", "system", {
            "data_subject": data_subject_id,
            "action": ,
        })

Automated Compliance Check

def run_compliance_check(config: dict) -> dict:
    """Run automated compliance checks against configuration."""
    checks = []

    # Check credential storage
    if config.get("key_source") == "environment":
        checks.append(("WARN", "credentials", "Using env vars; prefer secrets manager"))
    elif config.get("key_source") == "secrets_manager":
        checks.append(("PASS", "credentials", "Using secrets manager"))

    # Check TLS
    if config.get("base_url", "").startswith("https://"):
        checks.append(("PASS", "tls", "HTTPS enforced"))
    else:
        checks.append(("FAIL", "tls", "Not using HTTPS"))

    # Check content filtering
    if config.get("content_filter_enabled"):
        checks.append(("PASS", "content_filter", "Pre-submission filtering active"))
    else:
        checks.append(("WARN", "content_filter", "No pre-submission content filtering"))

    # Check audit logging
    if config.get("audit_logging"):
        checks.append(("PASS", "audit", ))
    :
        checks.append((, , ))

    
     status, area, message  checks:
        icon = {: , : , : }[status]
        ()

     {
        : (  s, _, _  checks  s == ),
        : (  s, _, _  checks  s == ),
        : (  s, _, _  checks  s == ),
    }

Resources