Back to skill

Security audit

Offer Profitability Checker

Security checks for vulnerabilities and agentic risk

Overview

This skill is a low-risk ecommerce profitability helper made only of markdown instructions, with no hidden access, persistence, or credential use found.

Safe to install from a security perspective. Users should verify business assumptions and review any generated Python script before relying on it for pricing or launch decisions, and non-Chinese users may need to ask the agent to respond in their preferred language.

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Static analysis

No suspicious patterns detected.