Back to plugin

Security audit

企服助手

Security checks for vulnerabilities and agentic risk

Overview

This enterprise assistant is mostly purpose-aligned, but it handles sensitive business data, scheduled external notifications, and state-changing records with under-disclosed safeguards.

Install only in an environment where the Excel ledger and WeCom recipients are approved for this data. Before production use, remove or rotate the exposed webhook URL, configure your own webhook as a protected secret, disable scheduled pushes until reviewed, add confirmation for inventory and work-order changes, and document who may receive tenant, payment, contract, and complaint information.

Static analysis

No suspicious patterns detected.