Security audit
AI 副业顾问
Security checks for vulnerabilities and agentic risk
Overview
This is a disclosed, instruction-only side-hustle helper that queries gig platforms and uses optional user preferences, with no hidden installer, persistence, or destructive behavior shown.
Before installing, review which platforms it may query, keep any API keys limited and revocable, and avoid putting sensitive financial or personal details in HUSTLE.md. Treat generated proposals as drafts and review them before sending.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.