Security audit
店店通·餐饮开关店与竞对分析
Security checks for vulnerabilities and agentic risk
Overview
This skill is a disclosed restaurant-location analysis helper that uses a named external API with a user-provided key and includes clear limits against bulk data extraction.
Install only if you intend to use the DDT restaurant-network API. Keep DDT_API_KEY private, expect brand/location queries to be sent to gotoshop-ai.com, and rely on the skill's built-in limits for aggregate-first analysis instead of full store-list extraction.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.