Security audit
缺陷生命周期
Security checks for vulnerabilities and agentic risk
Overview
This skill is a QA bug lifecycle guide that is disclosed, narrowly scoped, and does not include executable or hidden behavior.
Installers should still avoid pasting real production customer data, payment details, screenshots, IDs, or other sensitive bug evidence unless it has been redacted, which the skill itself also warns about.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.