Security audit
悦拜返利助手
Security checks for vulnerabilities and agentic risk
Overview
This is a markdown-only rebate helper skill with no executable code or hidden access, though users should verify any rebate or promotional-link claims.
Safe to install as an instruction-only skill. Before acting on rebate percentages, task rewards, commission withdrawals, or promotional links, confirm them through the official merchant or service and avoid sharing account credentials unless you independently trust the destination.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.