Back to skill

Security audit

创业启动助手

Security checks for vulnerabilities and agentic risk

Overview

This is an informational startup checklist skill with no evidence of hidden access, credential handling, or autonomous account actions.

Safe to install as an informational guide. Users should verify legal, tax, banking, ICP, and trademark requirements with official agencies or qualified professionals, and should submit sensitive identity or company documents only through trusted official platforms or chosen service providers.

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Static analysis

No suspicious patterns detected.