stock-rumors-aisa

• Outcome: Pass
• Latest audit: May 29, 2026 at 8:40 PM UTC
• Version:
  1.0.0

Overview

This is a disclosed market-rumor scanning helper that sends prompts to an AISA-compatible API and does not show hidden local access, persistence, or account-changing behavior.

Install only if you trust the AISA API provider and are comfortable sending market-analysis requests through your AISA_API_KEY. Treat the results as leads, not investment advice, and verify any rumor or signal against primary sources before acting.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

Natural-Language Policy Violations

Medium

• Confidence: 93% confidence
• Finding: The prompts explicitly direct the model to aggressively surface rumors, social whispers, and other unconfirmed market signals without requiring strong verification or explicit user acknowledgement of speculative content. In a financial-analysis skill, this increases the chance of generating misleading or manipulative-seeming output based on weak evidence, which can cause downstream harm if users treat the results as actionable intelligence.

VirusTotal

67/67 vendors flagged this skill as clean.