Security audit
Security checks for vulnerabilities and agentic risk
This is a simple Chinese-language stock briefing skill with no executable code, persistence, credential handling, or hidden behavior.
Before installing, understand that this skill is oriented toward Chinese-language stock briefings and may ask for holdings such as ticker, cost, and quantity. Treat any buy/sell/hold suggestions as informational support, not financial advice.
The manifest description and the entire user-facing markdown content are written in Chinese, and the example invocations are also Chinese-only. Under the policy rule, forcing a specific language without user opt-in can be a natural-language policy violation unless the locale constraint is explicitly justified, which is not stated here.
The package description is written only in Chinese ("股票每日简报生成器"), which may imply a fixed language/locale without any stated opt-in or justification. Under the policy rule, language constraints should either offer user choice or clearly document that the skill is intentionally region- or language-specific.
No suspicious patterns detected.
