Security audit
Security checks for vulnerabilities and agentic risk
The skill reads existing Amazon monitoring data through ARI using disclosed account authorization, with no material security concern found.
Authorize the intended ARI account and expect account-wide monitoring data, account details and credit balance to enter the agent session. Protect ~/.ari/config.json from sharing or cloud synchronization, and revoke the key when no longer needed.
The skill uses 'env' capability that is not covered by the declared 'allowed-tools' preapproval. Review the host runtime's actual enforcement policy; runtime permissions are unknown unless separately verified, and this declaration alone does not establish a permission ceiling.
The skill uses 'file_write' capability that is not covered by the declared 'allowed-tools' preapproval. Review the host runtime's actual enforcement policy; runtime permissions are unknown unless separately verified, and this declaration alone does not establish a permission ceiling.
The skill uses 'network' capability that is not covered by the declared 'allowed-tools' preapproval. Review the host runtime's actual enforcement policy; runtime permissions are unknown unless separately verified, and this declaration alone does not establish a permission ceiling.
Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.
def cmd_monitor(args):
"""监控中心只读总览：不创建监控、不采集、不调用 LLM。"""
emit(request_json("GET", "/api/v1/monitor/overview"), args.compact)
Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.
allowed = {item.strip() for item in commands
if isinstance(item, str) and item.strip()}
return allowed or None
Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.
"user": data_of(me),
"balance": data_of(balance),
}, "links": links()}, args.compact)
Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.
p = sub.add_parser("monitor", parents=[common], help="监控中心总览：评论、商品变化、差评与未读预警（只读免费）")
p.set_defaults(fn=cmd_monitor)
Dynamic getattr() with a non-literal attribute name can access arbitrary object attributes, potentially bypassing access controls.
所以校验不能写死 B 前缀。顺手把值归一成大写，后续命令不必再 upper()。
"""
for attr in ("asin", "competitor"):
value = getattr(args, attr, None)
if value in (None, ""):
continue
normalized = str(value).strip().upper()