Back to skill

Security audit

紫微斗数技能

Security checks for vulnerabilities and agentic risk

Overview

This appears to be a simple Chinese astrology charting skill with broken or incomplete implementation pieces, but no evidence of hidden data access or harmful behavior.

Install only if you want an experimental Zi Wei Dou Shu astrology helper. It does not show harmful behavior, but expect it may not run as documented until the missing script or broken JavaScript is fixed; avoid treating generated fortune or finance/career advice as factual guidance.

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Static analysis

No suspicious patterns detected.