Security audit
Security checks for vulnerabilities and agentic risk
This is a coherent SeaTunnel configuration helper with example credentials that users should replace, but it does not contain hidden execution, persistence, or data exfiltration behavior.
Before installing or using this skill, treat every credential in its examples as a placeholder, use environment variables or a secret manager for real passwords, and review generated SeaTunnel jobs carefully before running them against production data sources or sinks.
The manifest description and all instructional content are written in Chinese, and the skill persona/response guidance implicitly constrains operation to that language. There is no opt-in, alternative language option, or stated region-specific justification, which matches the language/locale policy violation criteria.
The skill includes multiple credential-looking fields such as user, username, and password populated with realistic values like root, postgres, elastic, and password, but it does not explicitly warn that these are placeholders or instruct users not to paste real secrets into chats or configs. In a data-integration skill, users are very likely to copy examples verbatim into production-adjacent jobs, which increases the chance of weak default credentials, accidental secret disclosure, or unsafe secret handling.
No suspicious patterns detected.
