Security audit

丁磊思维视角 v2.0

Security checks for vulnerabilities and agentic risk

Overview

This is a text-only persona skill for product and strategy advice using a Ding Lei-style perspective, with no code execution, credentials, persistence, or external access.

Safe to install as a persona or strategy-thinking aid. Treat its responses as heuristic commentary based on public information, not as Ding Lei’s real views, and verify business, financial, or historical claims before relying on them.

SkillSpector

Vulnerability Patterns

Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

Confidence: 93% confidence
Finding: The trigger list includes generic business phrases such as “产品主义”, “慢公司”, and “兴趣驱动” that can easily appear in ordinary product or strategy conversations. This can cause unintended skill activation, steering unrelated discussions into this persona and potentially overriding user intent or other more appropriate skills.

Static analysis

No suspicious patterns detected.