stock watch

• Outcome: Pass
• Latest audit: May 29, 2026 at 8:15 PM UTC
• Version:
  1.1.0

Overview

This is a coherent stock quote and Markdown watchlist helper with disclosed external lookups and scoped file edits.

Install only if you are comfortable sending stock lookup terms to Eastmoney. Keep the watchlist in a dedicated Markdown file such as ./watchlist.md, avoid storing sensitive account data in it, and only set STOCK_WATCHLIST_ALLOWED_ROOTS for directories you intentionally want the skill to edit.

SkillSpector

By NVIDIA

Vulnerability Patterns

• MCP Least Privilege: Underdeclared Capability, Wildcard Permission, Missing Permission Declaration
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Lp3

Medium

• Category: MCP Least Privilege
• Confidence: 88% confidence
• Finding: The skill exercises sensitive capabilities including network access, environment-variable configuration, and Markdown file read/write operations, but it does not declare permissions. That creates a transparency and governance gap: users and the host agent may invoke a skill that can modify files or access external services without an explicit capability contract. In this context the risk is real because the workflow explicitly supports arbitrary --file paths and external HTTP quote/search calls, increasing the chance of unintended file modification or data egress if the skill is misused or integrated into a broader agent pipeline.

VirusTotal

66/66 vendors flagged this skill as clean.