Security audit
Fin PIPL -金融行业个人信息保护合规检查工具
Security checks for vulnerabilities and agentic risk
Overview
This skill is a local financial privacy compliance questionnaire and report generator with no evident network access, credential handling, persistence, or hidden behavior.
Installers should treat the output as an internal self-check aid, not legal advice or formal regulatory assurance. The current artifact is locally scoped and proportionate, but users should verify legal accuracy with qualified counsel for real compliance decisions.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.