Back to skill

Security audit

百度地图地址·餐饮开关店与竞对分析

Security checks for vulnerabilities and agentic risk

Overview

This skill gives structured instructions for using a restaurant-store analytics API and does not contain hidden execution, persistence, or destructive behavior.

Install only if you intend to use 店店通's restaurant analytics service and are comfortable sending restaurant brand/address queries to its API. Keep the DDT_API_KEY private and do not use this skill for full-store-list extraction or non-restaurant industries.

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Static analysis

No suspicious patterns detected.