Security audit
百积木 Bundle 开发
Security checks for vulnerabilities and agentic risk
Overview
This skill is a disclosed Baijimu bundle lifecycle helper that uses the Baijimu CLI for expected development, review, publishing, and installation workflows.
Install this only if you intend to manage Baijimu Bundles and are comfortable with the CLI making authenticated project, publishing, review, installation, upgrade, or uninstall changes under your direction. Verify the target workspace, project, Runtime, and CLI version before running lifecycle commands.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.