Security audit
闲鱼商品获取
Security checks for vulnerabilities and agentic risk
Overview
This is a simple Chinese guide for manually creating Xianyu service listings, with no executable code or hidden automation.
Use this as a listing template only. When adding portfolio examples or screenshots, redact client names, logos, contact details, order records, and confidential deliverables unless you have permission, and enter Taobao or Alipay credentials only in the official Xianyu app.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.