Security audit
Security checks for vulnerabilities and agentic risk
This is a markdown API-testing helper with no hidden code or persistence, but users should review any generated API commands before running them.
Install this only if you want an API request template/debugging helper. Review generated curl commands before execution, keep tokens in environment variables or placeholders, and be especially careful with POST, PUT, PATCH, DELETE, payment, CRM, or account-management endpoints.
The activation guidance is extremely broad, including generic activities like code generation, programming assistance, debugging, testing, and deployment. This can cause the skill to auto-trigger in many unrelated developer conversations, increasing the chance that its exec-capable behavior and request-generation instructions are invoked unexpectedly.
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
直接对Agent说：
> "帮我发一个 POST 请求到 https://api.example.com/v1/orders，body 是 `{"sku":"A1","qty":2}`，用 Bearer Token 认证。"
Agent会按本工具的模板规则输出：
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
直接对Agent说：
> "帮我发一个 POST 请求到 https://api.example.com/v1/orders，body 是 `{"sku":"A1","qty":2}`，用 Bearer Token 认证。"
Agent会按本工具的模板规则输出：
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
直接对Agent说：
> "帮我发一个 POST 请求到 https://api.example.com/v1/orders，body 是 `{"sku":"A1","qty":2}`，用 Bearer Token 认证。"
Agent会按本工具的模板规则输出：
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
直接对Agent说：
> "帮我发一个 POST 请求到 https://api.example.com/v1/orders，body 是 `{"sku":"A1","qty":2}`，用 Bearer Token 认证。"
Agent会按本工具的模板规则输出：
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
直接对Agent说：
> "帮我发一个 POST 请求到 https://api.example.com/v1/orders，body 是 `{"sku":"A1","qty":2}`，用 Bearer Token 认证。"
Agent会按本工具的模板规则输出：
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
直接对Agent说：
> "帮我发一个 POST 请求到 https://api.example.com/v1/orders，body 是 `{"sku":"A1","qty":2}`，用 Bearer Token 认证。"
Agent会按本工具的模板规则输出：
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
直接对Agent说：
> "帮我发一个 POST 请求到 https://api.example.com/v1/orders，body 是 `{"sku":"A1","qty":2}`，用 Bearer Token 认证。"
Agent会按本工具的模板规则输出：
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
直接对Agent说：
> "帮我发一个 POST 请求到 https://api.example.com/v1/orders，body 是 `{"sku":"A1","qty":2}`，用 Bearer Token 认证。"
Agent会按本工具的模板规则输出：
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
# === API Key (Header) ===
curl -H 'X-API-Key: 配置值' https://api.example.com/v1/data
# ...
# === Bearer Token (JWT/OAuth2) ===
curl -H 'Authorization: Bearer 配置值' https://api.example.com/v1/data
The keyword coverage section contains an overly expansive list of common technical terms, making accidental invocation highly likely. In an agent environment, broad trigger vocabularies can route ordinary developer tasks into a skill with read/write/exec capabilities, which raises the risk of unintended command generation or execution workflows.
No suspicious patterns detected.