Security audit
企服助手
Security checks for vulnerabilities and agentic risk
Overview
This enterprise assistant is mostly purpose-aligned, but it handles sensitive business data, scheduled external notifications, and state-changing records with under-disclosed safeguards.
Install only in an environment where the Excel ledger and WeCom recipients are approved for this data. Before production use, remove or rotate the exposed webhook URL, configure your own webhook as a protected secret, disable scheduled pushes until reviewed, add confirmation for inventory and work-order changes, and document who may receive tenant, payment, contract, and complaint information.
Static analysis
No suspicious patterns detected.
