Security audit
cbismb-harmonyos-publish
Security checks for vulnerabilities and agentic risk
Overview
This skill is an instruction-only helper for publishing HarmonyOS articles to cbismb.com, with the main risk being accidental public posting if the user does not review before publishing.
Install this only if you want the agent to publish to cbismb.com for you. Before using it, confirm the browser is logged into the right account and review the title, body, category, tags, originality, privacy agreement, and comment settings; ask the agent to save a draft or request final confirmation if you are not ready for public posting.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.