隐藏系统 Prompt 为什么不能成为移动 AI 的安全边界

from pathlib import Path
import json
import sys

if len(sys.argv) != 2:
    raise SystemExit(2)
config_path = Path(sys.argv[1])
if not config_path.is_file():
    raise SystemExit(2)
try:
    document = json.loads(config_path.read_text(encoding="utf-8"))
except (OSError, UnicodeError, json.JSONDecodeError):
    raise SystemExit(2)
if not isinstance(document, (dict, list)):
    raise SystemExit(2)
rules = {
    "systemprompt": ("behavior-config", "versioned server template or public client fallback"),
    "hiddenprompt": ("behavior-config", "versioned server template"),
    "apikey": ("credential", "server credential store"),
    "secret": ("credential", "server credential store"),
    "allowedroles": ("authorization", "server object authorization policy"),
    "authorizationrule": ("authorization", "server object authorization policy"),
    "toolpolicy": ("tool-permission", "server tool allowlist"),
    "privilegedtool": ("tool-permission", "server tool allowlist")
}
findings = []

def walk(value, path):
    if isinstance(value, dict):
        for key, child in value.items():
            normalized = "".join(character.lower() for character in str(key) if character.isalnum())
            if normalized in rules:
                category, destination = rules[normalized]
                findings.append({"path": path + [str(key)], "category": category, "destination": destination})
            walk(child, path + [str(key)])
    elif isinstance(value, list):
        for index, child in enumerate(value):
            walk(child, path + [str(index)])

walk(document, [])
summary = {"file": config_path.name, "findingCount": len(findings), "findings": findings}
print(json.dumps(summary, ensure_ascii=False, indent=2))
if any(item["category"] in {"credential", "authorization", "tool-permission"} for item in findings):
    raise SystemExit(3)