Stock Dividend

• Outcome: Pass
• Latest audit: May 29, 2026 at 8:40 PM UTC
• Version:
  1.0.1

Overview

This is a disclosed dividend-analysis skill that sends requested stock tickers to the AIsa API and shows no trading, purchasing, persistence, or destructive behavior.

Install only if you are comfortable providing an AIsa API key and sending requested ticker symbols and prompts to AIsa or any custom AISA_BASE_URL you configure. Treat the output as informational financial analysis, not investment advice.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

• Confidence: 78% confidence
• Finding: The description uses broad activation language such as 'use when the user asks about dividends, income investing, or dividend safety,' which can cause the skill to trigger on a wide range of ordinary finance questions. Over-broad triggering can unnecessarily route user requests to an external-API-backed skill, increasing data exposure and the chance of unintended execution even when the user did not specifically request dividend analysis.

VirusTotal

65/65 vendors flagged this skill as clean.