Security audit
Security checks for vulnerabilities and agentic risk
This skill is a disclosed market-analysis prompt that fetches public market data and does not execute trades or access private data.
Before installing, understand that the skill may browse external market-data websites when triggered and may activate on the short phrase "mss". Treat its signals as informational analysis only, verify prices and timezones independently, and do not rely on it as financial advice.
The single-token trigger "mss" is ambiguous and can easily collide with unrelated user input, abbreviations, or domain-specific shorthand. Because the skill then attempts to fetch live data from external sites, accidental activation can create unnecessary browsing behavior and unexpected financial-analysis responses.
The single-token trigger "mss" is ambiguous and can easily collide with unrelated user input, abbreviations, or domain-specific shorthand. Because the skill then attempts to fetch live data from external sites, accidental activation can create unnecessary browsing behavior and unexpected financial-analysis responses.
Forcing output to always use EST/Maryland time without user opt-in is a real policy and UX issue because it can misrepresent timing context for users in other locales, especially in a time-sensitive trading workflow. In financial analysis, timestamp ambiguity can increase confusion and lead to incorrect interpretation of market conditions, though it is not a direct security compromise.
No suspicious patterns detected.
