Security audit
噗滋慈善 - 申报助手 / pozzzi-charity application-assistant
Security checks for vulnerabilities and agentic risk
Overview
This is a coherent NGO funding-application drafting helper with disclosed model use and local logging, and I found no hidden execution, credential theft, purchases, or destructive behavior.
Before installing, confirm which model provider and storage adapter your environment will use, because application and budget details may be sent to that provider and limited local history is retained. Treat outputs as drafts, manually fill placeholders, and review all legal, financial, and submission details before use.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.