Security audit
网约车预订
Security checks for vulnerabilities and agentic risk
Overview
This car-service skill is a disclosed ride-booking helper, but the included code only simulates rides locally rather than using a real car-service platform.
Safe to install as a mock or demo car-service helper. Do not treat prices, drivers, or order IDs as real unless the skill is separately wired to an actual provider, and require explicit user confirmation before any live booking, cancellation, payment, or account action.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.