Security audit
大师研究笔记工作流
Security checks for vulnerabilities and agentic risk
Overview
This skill is a transparent research-and-note-taking workflow that can create Obsidian notes, with ordinary privacy and file-writing cautions but no evidence of malicious behavior.
Install only if you want an agent to perform web/delegated research and create Obsidian notes. Confirm the exact vault path and filename before writing, avoid overwriting existing notes without review, and do not provide sensitive personal or business context unless it is necessary for the note.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.