Security audit
德胧商业写作助手
Security checks for vulnerabilities and agentic risk
Overview
This is a business-writing helper made only of instructions, with no code, credential access, persistence, or hidden actions.
Reasonable to install as a business-writing assistant. Users should still verify generated citations, source links, data, and business claims before relying on outputs, and should note the minor metadata mismatch if publisher provenance matters.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.