Back to skill

Security audit

任务闭环管理

Security checks for vulnerabilities and agentic risk

Overview

This is a document-only task management skill with no executable code, credential use, persistence, or hidden behavior found.

This skill is low risk as published. If you later connect its workflow to real task trackers, Cron jobs, CI systems, or trading infrastructure, review that separate integration code and grant only the minimum permissions needed.

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Static analysis

No suspicious patterns detected.