Security audit
测试自动化架构
Security checks for vulnerabilities and agentic risk
Overview
This skill provides disclosed QA test automation architecture guidance and does not show hidden data access, persistence, or unsafe actions.
Before installing, review the optional recommendation to install the full QA skill set because that would add more skills than this single artifact. Avoid pasting real customer, payment, identity, or production data into prompts for this skill.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.