Security audit
Security checks for vulnerabilities and agentic risk
This skill is a narrow Markdown-only helper for turning analyst or industry reports into Chinese investment-style summaries, with no hidden execution or persistence behavior found.
Install this if you want Chinese investment-style summaries of analyst or industry reports. Be aware that generic triggers may activate it in nearby finance conversations, and it may answer in Chinese unless you explicitly ask otherwise.
The trigger 'analyst' is broad enough to match many ordinary finance or workplace queries unrelated to this skill's narrow purpose. This can cause unintended activation, leading the assistant to apply domain-specific formatting and assumptions to unrelated user requests, which is a prompt-routing integrity issue.
The shorthand trigger '180k' is ambiguous and lacks contextual bounds, so it may collide with unrelated inputs such as salaries, quantities, product specs, or IDs. Ambiguous activation increases the chance of misrouting user requests into this skill, causing unwanted behavior and reducing trust in assistant intent handling.
Forcing output to always be in Chinese without checking user preference can override user intent and create unsafe mismatches in multilingual contexts, especially if the input is compliance-sensitive or needs faithful English retention. While not a classic exploit, it is a robustness and policy-control weakness because the skill unconditionally constrains response language.
The trigger '研报' is very short and common in this domain, making accidental activation more likely whenever users casually mention research reports. In a skill-routing system, short generic triggers can hijack broader conversations and steer the assistant into a specialized mode the user did not explicitly request.
