Security audit
Alipay Wallet
Security checks for vulnerabilities and agentic risk
Overview
This is only a markdown skill, but it describes handling sensitive Alipay financial records and recurring bill synchronization without explaining permissions, data sources, or user controls.
Review before installing. Treat this as general Alipay wallet guidance only; do not provide passwords, SMS codes, cookies, unrestricted transaction exports, or sensitive account records, and verify balances, tax details, investment information, and transfers in the official Alipay app.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.