Security audit
Pdd Android Adb
Security checks for vulnerabilities and agentic risk
Overview
The skill is a disclosed Pinduoduo shopping automation guide that can make purchases only with explicit user confirmation and payment participation.
Install only if you are comfortable letting the agent control the Pinduoduo Android app over USB ADB for purchases. Confirm product, quantity, shop, and price before order submission, provide payment credentials only at the moment needed, and periodically clear the OCR screenshot cache if it may contain personal data.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.
