Security audit
通联终端申请 & 增商
Security checks for vulnerabilities and agentic risk
Overview
This skill is a disclosed business workflow for preparing terminal or sub-merchant application documents and sending them only after user confirmation.
Install only if you intend to let the agent handle this specific merchant terminal application process. Review generated Excel files and email text before approving send, because the workflow can transmit merchant numbers, store details, addresses, and phone numbers to the named external recipient.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.