Security audit

文本人性化工具专业版

Security checks for vulnerabilities and agentic risk

Overview

This Markdown-only skill is coherent with its batch text rewriting purpose, with the main caution that its CI example may overwrite content files if used without backups.

Install only if you want an agent to help rewrite batches of content. Before using the CI-style workflow, keep source files under version control, run on a limited directory, review diffs, and avoid in-place overwrites unless you intentionally accept that behavior.

SkillSpector

Vulnerability Patterns

Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

Missing User Warnings

Medium

Confidence: 95% confidence
Finding: The CI example overwrites the original file in place with open(path, "w") after processing, without warning about data loss, review bypass, or rollback implications. In an automation context this can destroy source content, propagate bad transformations at scale, and make recovery difficult if the output is incorrect or maliciously influenced.

Static analysis

No suspicious patterns detected.