Security audit
猫咪塔罗占卜助手
Security checks for vulnerabilities and agentic risk
Overview
This is a coherent tarot-reading assistant that uses bundled data and a local Python helper, with no evidence of credential use, network access, persistence, or destructive behavior.
Install only if you are comfortable with the agent running the bundled Python helper for tarot readings and, if needed, installing typer and pydantic from trusted package sources. Treat the tarot output as entertainment or reflection, not professional financial, medical, legal, or mental-health advice.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.