other
Error
- Location
scripts/finance_analysis.py:121- Finding
Hardcoded Financial Results Are Presented as Stock-Specific Analysis
- Content
View full analysis
- Remediation
View remediation
Security audit
Finance Analysis
Security checks for vulnerabilities and agentic risk
Overview
This finance skill does not show malware behavior, but its valuation and risk commands can present fixed demo numbers as stock-specific investment analysis.
Review before installing. Treat the valuation and risk outputs as illustrative only unless the publisher replaces the fixed values with sourced, stock-specific calculations and adds clear non-advice disclaimers. Pin Python dependencies and understand that enabling TUSHARE_TOKEN may send queried stock symbols to Tushare.
Vulnerability Patterns
- Insecure DependenciesIntroduces malicious components through unsafe dependency sources
- Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
- Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
- Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
- Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Findings (3)
T09 · Insecure Skill Coding Practices
Warning
- Location
scripts/finance_analysis.py:56- Finding
Unsanitized Stock Codes Permit Terminal Escape-Sequence Injection
- Content
View full analysis
- Remediation
View remediation
T08 · Insecure Dependencies
Warning
- Location
SKILL.md:116- Finding
Python Installation Instructions Use Unpinned Third-Party Dependencies
- Content
View full analysis
- Remediation
View remediation
Vulnerability Patterns
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
- MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (11)
Undeclared Tool Scope
Medium
- Category
- MCP Least Privilege
- Confidence
- 70% confidence
- Finding
Without declared permissions the skill's intent is opaque and cannot be validated.
- Content
Natural-Language Policy Violations
Medium
- Category
- Not specified by scanner
- Confidence
- 93% confidence
- Finding
The natural-language content of the skill, including its description and usage instructions, is presented only in Chinese. This can violate a language/locale policy when the skill effectively forces a specific language without offering the user an explicit choice or documenting that the skill is region-specific.
- Content
Natural-Language Policy Violations
Medium
- Category
- Not specified by scanner
- Confidence
- 92% confidence
- Finding
This code file contains natural-language strings that establish a fixed language/locale for the skill experience. Under the policy, forcing a specific language without offering the user a choice is a natural-language policy violation unless clearly justified as region-specific.
- Content
Intent-Code Divergence
Medium
- Category
- Not specified by scanner
- Confidence
- 97% confidence
- Finding
The DCF valuation function presents itself as a stock-specific valuation tool but emits hard-coded example assumptions and results regardless of the provided stock code. In a finance-analysis skill, this is dangerous because users may rely on fabricated outputs for investment decisions, creating integrity and trust risks even without code execution or data exfiltration.
- Content
Intent-Code Divergence
Medium
- Category
- Not specified by scanner
- Confidence
- 97% confidence
- Finding
The relative valuation command claims to assess the specified stock but only prints a static multiples table and a fixed recommendation. In the context of a finance CLI, this can mislead users into believing the result is data-driven, which is a harmful integrity flaw because the recommendation is detached from the actual asset analyzed.
- Content
Intent-Code Divergence
Medium
- Category
- Not specified by scanner
- Confidence
- 98% confidence
- Finding
The risk assessment feature outputs fixed metrics, score, and 'low risk' language without evaluating the input stock. In a financial decision-support skill, this is particularly dangerous because it can create false assurance about risk and directly influence user behavior based on fabricated analysis.
- Content
Missing User Warnings
Medium
- Category
- Not specified by scanner
- Confidence
- 92% confidence
- Finding
The function emits explicit investment recommendations such as '可以买入', '值得买入', and '强烈买入' without any disclaimer that the output is simplified, informational only, and not financial advice. In a finance-analysis skill, users may reasonably rely on these statements for real financial decisions, increasing the risk of harmful overtrust even though there is no code-execution or data-exfiltration component.
- Content
Natural-Language Policy Violations
Low
- Category
- Not specified by scanner
- Confidence
- 88% confidence
- Finding
SQP-3 applies to natural-language policy issues in all file types. Nearly all user-facing instructions and descriptions are in Chinese, and the document does not indicate that the skill is region-specific or provide any opt-in or alternative language, which can amount to a forced language/locale choice.
- Content
Missing User Warnings
Low
- Category
- Not specified by scanner
- Confidence
- 80% confidence
- Finding
This is a markdown file, so SQP-2 applies to omissions in user-facing warnings. The README introduces
TUSHARE_TOKENfor Tushare API access, which implies network calls to an external service, but it does not warn users that stock queries and related usage data may be sent to that provider.- Content
Natural-Language Policy Violations
Low
- Category
- Not specified by scanner
- Confidence
- 87% confidence
- Finding
This manifest uses Chinese-only natural-language fields such as the description, author name, and tags, with no indication that the skill supports other languages or that the user can choose a locale. Under the policy for natural-language violations, forcing a specific language without user opt-in can be a locale-policy issue.
- Content
Natural-Language Policy Violations
Low
- Category
- Not specified by scanner
- Confidence
- 95% confidence
- Finding
User-facing docstrings, headers, labels, and recommendations throughout the file are written exclusively in Chinese, which imposes a fixed language/locale on users. The policy allows locale constraints when they are justified or optional, but this file does not provide language selection or explain that it is intentionally region-specific.
- Content