Security audit
Security checks for vulnerabilities and agentic risk
This is a disclosed A-share stock-analysis skill with financial-advice and local watchlist caveats, but no evidence of hidden execution, exfiltration, or destructive behavior.
Install only if you want an A-share-focused assistant. Treat its trading suggestions as informational, confirm market scope when asking ambiguous questions, and be aware that price alerts may be stored locally in a watchlist file if you ask it to monitor targets.
The activation text is broad enough to trigger on general investing or trading discussion, not just narrow A-share data lookups. That can cause the assistant to enter a high-risk finance workflow unexpectedly, leading to unsolicited trading guidance, inappropriate tool use, or overconfident financial advice in contexts where the user did not clearly request this specialized skill.
The skill hardcodes a single market and locale behavior and states it only serves mainland China A-shares while automatically ignoring other markets, without checking the user's language or market preference. In ambiguous conversations, this can mis-handle user intent, suppress relevant alternatives, and produce incorrect or incomplete financial guidance if the user meant Hong Kong, U.S., or multilingual support.
