Security audit
美团爆单操盘手
Security checks for vulnerabilities and agentic risk
Overview
This skill is a disclosed Meituan group-buying marketing planner that uses public competitor research and local templates without hidden execution or privileged access.
Installers should understand that the skill may prompt the agent to search the web for competitor and platform-rule data, and that generated pricing or compliance advice should be verified against current Meituan rules and local regulations before publishing.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.