Security audit
Security checks for vulnerabilities and agentic risk
The background-check workflow is coherent, but its setup unnecessarily exposes your API key by requiring you to paste it into chat.
Review before installing. Configure your API key privately through a protected local configuration or environment variable instead of pasting it into chat; replace a key already shared there. Review downloaded runner updates, understand that research queries go to Cue, and check report-link visibility before sharing background-check material.
Document conversion could support delivery of a due-diligence report, but the supplied chunk only converts an existing Markdown file. It contains none of the substantive investigative or analytical behavior central to the declared purpose. The mismatch concerns the materially different implemented purpose, not document conversion as an undeclared supporting detail.
The supplied code performs repository installation and maintenance only. It contains no business-record retrieval, judicial-history analysis, control-network mapping, or report generation. Although repository setup could support a larger Cue workflow, the supplied chunk does not establish that connection or implement the declared purpose. No execution of downloaded repository contents is shown.
The skill repeatedly instructs users to paste their API key into the agent conversation, exposing a reusable credential to chat history, logging, and any systems or people with access to those records. The key is legitimately needed for Cue authentication, but conversational collection unnecessarily expands exposure and could enable unauthorized API use or consumption of account credits.
Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.
| 目标格式 | 依赖 | macOS | Ubuntu |
|----------|------|-------|--------|
| Word (.docx) | pandoc | `brew install pandoc` | `sudo apt install pandoc` |
| PDF (.pdf) | pandoc + LaTeX | `brew install --cask basictex` | `sudo apt install texlive-xetex` |
---
Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.
| 目标格式 | 依赖 | macOS | Ubuntu |
|----------|------|-------|--------|
| Word (.docx) | pandoc | `brew install pandoc` | `sudo apt install pandoc` |
| PDF (.pdf) | pandoc + LaTeX | `brew install --cask basictex` | `sudo apt install texlive-xetex` |
---
No suspicious patterns detected.