Security audit
Security checks for vulnerabilities and agentic risk
This markdown-only skill provides stock-analysis guidance with minor scope and language mismatches, but no code, persistence, credential handling, or hidden behavior.
Install only if you want a Chinese-market-oriented stock analysis helper. Be aware it may also discuss U.S. stocks despite the China-focused name, and its templates default to Chinese. Treat any buy, hold, or sell output as informational only, not personalized financial advice.
The manifest description limits the skill to Chinese stock prices, specifically A-shares and HK stocks. However, the supported markets table in the skill documentation states that US tickers such as AAPL, TSLA, and NVDA are supported, which expands the behavior beyond the declared scope.
The skill prescribes a Chinese search query format ("{股票名称} 股价 今日") and the response template is written in Chinese, which indicates a default language constraint. Because the file does not offer an opt-in or alternative language choice, this is a natural-language policy concern under the language/locale rule.
The document is primarily written in Chinese and includes Chinese-only search phrases and labels, while the title and some section headers are in English. This creates a language/locale constraint without any indication that the user can choose another language or locale, which matches the policy concern for forced language use.
The manifest says the skill analyzes Chinese stock prices, specifically A-shares and Hong Kong stocks. This reference file expands the scope to U.S. stocks and general U.S. tech giants, which is broader than the stated skill purpose and could steer the skill into recommendations outside its declared domain.
