Back to skill

Security audit

HR 税费计算器

Security checks for vulnerabilities and agentic risk

Overview

This is a local HR tax calculator skill with no network access, persistence, credential handling, or hidden high-impact behavior found.

Reasonable to install if you want local HR tax estimates. Treat outputs as calculations based on the bundled rules, not professional tax advice, and update or verify the tax constants if policy changes.

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Static analysis

No suspicious patterns detected.