Security audit
Li_doc_answer - 通用文档 AI 答案生成
Security checks for vulnerabilities and agentic risk
Overview
This is a local document-processing skill that reads user-selected Word or Markdown files and writes processed .docx outputs, with no evidence of hidden network access, credential use, or persistence.
Install dependencies from trusted sources, process only documents you intend this local tool to read, choose output paths carefully because explicit output filenames can overwrite existing files, and manually review generated answers before relying on or sharing them.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.
