Security audit
structs-commerce
Security checks for vulnerabilities and agentic risk
Overview
This skill is a plain guidance document for Structs commerce actions, with no executable installer or hidden automation, but it describes irreversible token and staking transactions users should review carefully.
Before installing or using this skill, confirm you understand that the transaction examples can spend, stake, transfer, or lock in-game assets when signed. Verify provider rates, denominations, validator and destination addresses, and use interactive signing so each transaction is reviewed before broadcast.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.