Back to skill

Security audit

Lab2startup Ecosystem

Security checks for vulnerabilities and agentic risk

Overview

This is a static Chinese guidance skill for university startup resource planning and does not install code, request credentials, or take actions on its own.

Use this as a planning checklist, not authoritative legal, tax, IP, or funding advice. Verify policy details with the relevant university office, technology-transfer office, tax advisor, or government program before acting.

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Static analysis

No suspicious patterns detected.