Security audit
招标文件版本比对器 · 招标人版
Security checks across malware telemetry and agentic risk
Overview
This skill is a disclosed tender-document comparison assistant that reads user-provided files, checks differences, optionally consults a named knowledge base, and produces local reports.
Before installing, users should be comfortable providing tender documents for local parsing and, where used, knowledge-base lookups. Treat the output as an internal compliance aid, not final legal advice, and review low-confidence or data-gap findings against the original documents.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
65/65 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.