Security audit

Solo Ecommerce Agent

Security checks for vulnerabilities and agentic risk

Overview

This skill is purpose-aligned e-commerce automation, but it asks for unattended authority over live store listings, customer messages, shipping, refunds, and local customer/order records without enough safety boundaries.

Install only after reviewing the operational risk. Use a test store or narrowly permissioned account first, keep publishing, shipping, refunds, and customer replies behind human approval, avoid unattended cron until safeguards are in place, and protect or regularly delete local customer/order data and API credentials.

SkillSpector

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access

Findings (9)

Missing User Warnings

High

Confidence: 95% confidence
Finding: The README explicitly promotes fully automated publishing, customer service, order handling, shipping, and refund review with '无需人工干预' and no prominent warning about irreversible actions, account consequences, or customer-data handling. In an e-commerce context, these capabilities can directly affect listings, orders, refunds, and customer communications, so lack of safety boundaries materially increases the risk of financial loss, privacy mishandling, and platform policy violations.

Missing User Warnings

Medium

Confidence: 93% confidence
Finding: The README encourages cron-based background execution that will continue acting on platform accounts and locally stored customer/order data, but it does not warn users that the agent may keep taking actions unattended after initial setup. This is dangerous because unattended automation can amplify mistakes, repeatedly perform unwanted actions, and process sensitive business and customer data without timely human review.

Missing User Warnings

High

Confidence: 94% confidence
Finding: The skill explicitly advertises fully automatic product publishing, customer replies, shipping, and refund review with little or no human approval, while also storing operational, customer, and order data locally. In an e-commerce context, these actions can cause irreversible business, financial, privacy, and compliance harm if the agent acts incorrectly, is misconfigured, or is abused through prompts or bad input.

Vague Triggers

Medium

Confidence: 84% confidence
Finding: The description claims 'full-platform, fully automated' ecommerce operations across product selection, listing, customer service, and order handling without stating any limits, approvals, guardrails, or human review points. For an agent skill that can act across multiple business-critical workflows, this broad scope increases the risk of unsafe autonomous actions, policy violations, customer harm, and abuse if the skill is enabled in an unconstrained environment.

Missing User Warnings

Medium

Confidence: 94% confidence
Finding: The guide instructs an agent to confirm shipment on live e-commerce orders without any warning, approval gate, or requirement to verify that fulfillment has actually occurred. In an automation context, this can cause irreversible order-state changes, customer harm, false shipment reporting, and operational or compliance issues if executed on the wrong order or before dispatch.

Missing User Warnings

Medium

Confidence: 94% confidence
Finding: The Douyin Shop workflow similarly automates shipment confirmation on a production merchant backend with no warning about live operational impact. Because the skill assumes an authenticated session and provides direct steps to update order state, accidental or unauthorized use could affect real customer orders immediately.

Missing User Warnings

Medium

Confidence: 93% confidence
Finding: The Pinduoduo instructions include recording logistics information and confirming shipment, which modifies live transactional data. Without warnings, validation, or approval controls, an automated agent could submit incorrect tracking details or prematurely mark items as shipped, creating customer-service, refund, and audit problems.

Missing User Warnings

Medium

Confidence: 90% confidence
Finding: Although the JD section is shorter, it still directs the agent to process shipment for pending orders without safety notes or constraints. In the context of browser automation against a logged-in merchant backend, even sparse instructions can enable harmful state-changing actions on real orders.

Missing User Warnings

Low

Confidence: 84% confidence
Finding: The API section mentions using keys and platform APIs but omits basic credential-handling guidance such as secure storage, least privilege, redaction, and avoiding hardcoding or logging secrets. In an agent skill, this omission can lead operators to expose tokens in prompts, files, or automation traces, increasing the risk of account compromise.

Static analysis

No suspicious patterns detected.