Security audit
Alephnet节点
Security checks for vulnerabilities and agentic risk
Overview
The skill is not overtly malicious, but it describes broad social, memory, autonomous-agent, and staking actions without enough user-control boundaries.
Review this carefully before installing. Use a restricted API key, avoid connecting accounts or wallets with real value until the provider and command behavior are verified, and require explicit confirmation before public posts, private messages, profile updates, memory synchronization, or staking actions.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.