Security audit
social-media-search
Security checks for vulnerabilities and agentic risk
Overview
This is a straightforward browser-search helper for Douyin, Xiaohongshu, and Bilibili, with no executable install code or hidden persistence found.
Install this if you want the agent to open these social-media sites and submit search terms for you. Sign out first if you do not want returned snapshots to reflect personalized or account-visible content, and use explicit slash-style commands to avoid accidental activation.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.