Security audit
法律合规
Security checks for vulnerabilities and agentic risk
Overview
This skill is a disclosed Cue legal-research integration that fetches public legal/compliance research through an external runner after user confirmation for credit use.
Before installing, confirm you are comfortable with the skill cloning or updating the Cue runner under ~/.cue, using your Cue account API key, sending the legal research subject or question to Cue, and consuming Cue credits after confirmation. Treat generated legal research as a sourced draft, not a substitute for professional legal review.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.