Security audit
检测报告合规护栏
Security checks for vulnerabilities and agentic risk
Overview
This is a focused compliance-checking skill for Chinese product inspection reports, with no hidden execution, persistence, or data-access behavior in the artifact.
Before installing, treat this as a compliance drafting aid rather than legal certification. Users should verify cited Chinese regulations, standards, and CMA requirements against current authoritative sources before relying on the review for publication decisions.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.