Security audit
Security checks for vulnerabilities and agentic risk
This is a disclosed Pclaw platform workflow skill with no bundled code or persistence, but users should be aware that using it may send business details to Pclaw APIs and may create platform records.
Install only if you intend to use Pclaw sourcing workflows. Before publishing demands, resources, matches, or expo entries, confirm exactly what will be sent to Pclaw and avoid entering confidential budgets, client names, project details, or commercial terms unless you are comfortable sharing them with that service.
The standalone trigger phrase "展会" is overly generic and likely to match normal discussion about exhibitions, events, or trade shows. Because this skill includes operational routes such as listing, joining, or creating expos, broad triggering increases the chance of unintended platform actions or unnecessary collection/transmission of user intent and metadata.
The standalone trigger phrase "展会" is overly generic and likely to match normal discussion about exhibitions, events, or trade shows. Because this skill includes operational routes such as listing, joining, or creating expos, broad triggering increases the chance of unintended platform actions or unnecessary collection/transmission of user intent and metadata.
The skill documents external platform and API endpoints but does not warn users that publishing demands, resources, or earnings queries may send business-sensitive data to an external service. In this context, users may disclose project descriptions, budgets, deadlines, and commercial information without informed consent, creating privacy, confidentiality, and compliance risk.
No suspicious patterns detected.
