Security audit
高德地图地址·餐饮连锁拓店选址分析
Security checks for vulnerabilities and agentic risk
Overview
This skill is a disclosed restaurant site-selection helper that uses a named external API with bounded queries and no hidden installation or persistence behavior.
Before installing, users should understand that restaurant brand names, candidate addresses, and related query details may be sent to gotoshop-ai.com using their DDT API key. The skill is appropriately bounded for its stated use, but users should avoid entering confidential expansion plans unless they are comfortable sharing them with that service.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.