Security audit
节日大促
Security checks for vulnerabilities and agentic risk
Overview
This is a non-executable 618 sales promotion planning checklist with no hidden code, credentials, persistence, or automatic actions.
Reasonable to install as a campaign planning aid. If an agent applies this guidance to real store, pricing, ad, affiliate, settlement, or order-tagging systems, require human approval before changing live discounts, customer-facing pages, tracking, or settlement settings.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.