Security audit
Security checks for vulnerabilities and agentic risk
This is a plain-language A-share trading strategy skill with financial-risk caveats needed, but no hidden code, persistence, credential handling, or data exfiltration behavior.
Before installing, understand that this skill may steer stock-trading decisions and uses aggressive short-term trading assumptions. Treat it as informational only, verify market data independently, and do not let an agent place trades or access brokerage accounts without explicit, separate controls.
The skill gives specific, actionable short-term trading instructions, position sizing, stop-loss rules, and security-selection criteria without any warning that this is risky financial guidance or may cause monetary loss. Because it is framed as an operational strategy rather than general education, users may reasonably rely on it as investment advice and suffer losses.
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
## 数据来源
### 每日必看
1. **东方财富** - 概念板块资金流向：https://data.eastmoney.com/bkzj/gn.html
2. **财联社** - 热点新闻：https://www.cls.cn/hot-stock
3. **同花顺/通达信** - 行情软件
The natural-language content of the skill forces a specific language for all users, and the file does not indicate any opt-in language selection or explicit region-specific constraint. This matches the language/locale policy violation category for all file types.
No suspicious patterns detected.