Back to skill

Security audit

社区团购

Security checks for vulnerabilities and agentic risk

Overview

This is a text-only business guidance skill for community group buying and does not ask for system access, credentials, automation, or persistent permissions.

This skill appears reasonable to install as general business guidance. Users should still verify any business advice against local laws, platform policies, advertising rules, contracts, tax obligations, and consumer-protection requirements before acting on it.

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Static analysis

No suspicious patterns detected.