Security audit
Case Echo
Security checks for vulnerabilities and agentic risk
Overview
This skill is a small local parser that turns short Chinese medical case text into JSON and shows no hidden network, credential, persistence, or destructive behavior.
Reasonable to install for local field extraction. Treat medical case text as sensitive, and ensure the agent invokes the script using safe argument passing rather than unsafe shell string interpolation.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.