Security audit
框架核心工程师 ORM与数据模型
Security checks for vulnerabilities and agentic risk
Overview
This is an instruction-only Weline ORM/database engineering skill with disclosed, purpose-aligned database guidance and no executable install behavior.
Install this if you want agent guidance for Weline ORM, schema, and query-provider work. Review generated database and schema diffs carefully, run targeted tests, and avoid running setup upgrades against shared or production databases without normal approval, backups, and rollback planning.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.