Stock Financial Analysis

• Outcome: Pass
• Latest audit: May 29, 2026 at 8:34 PM UTC
• Version:
  1.0.0

Overview

This is an instruction-only stock analysis skill with broad financial-analysis triggers but no code, credentials, persistence, or hidden data handling.

Install only if you want a broad stock-analysis helper. Treat outputs as educational analysis, verify market and financial data sources, and do not rely on it as personalized investment advice.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (2)

Vague Triggers

Medium

• Confidence: 88% confidence
• Finding: The skill description is very broad and covers many common investing and finance-related requests without clear activation boundaries. In agent systems, overly broad triggers can cause unintended invocation, leading the skill to handle requests outside its intended scope or to override more appropriate skills, which may result in unreliable financial guidance or unnecessary data access.

Vague Triggers

Medium

• Confidence: 91% confidence
• Finding: The listed trigger examples are phrased as common user questions that could appear in ordinary conversation, making accidental activation more likely. In a financial-analysis context, unintended invocation is more sensitive because it can produce quasi-investment recommendations or analysis in situations where the user did not explicitly request this specialized skill.

VirusTotal

65/65 vendors flagged this skill as clean.