Back to skill

Security audit

腾讯地图地址·餐饮品牌竞对情报分析

Security checks for vulnerabilities and agentic risk

Overview

This skill is a coherent restaurant competitor-analysis helper that uses a disclosed third-party API and does not include hidden execution, persistence, or broad local access.

Before installing, confirm you trust the DDT/gotoshop-ai service with the restaurant brands, addresses, and market-analysis queries you submit. Do not paste sensitive private locations unless that external API use is acceptable.

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Static analysis

No suspicious patterns detected.