Security audit
Security checks for vulnerabilities and agentic risk
This skill runs a small local demo script that returns fixed example stock lists and does not access live financial data, credentials, persistence, or the network.
Install this only if you want a Chinese-language educational demo that returns fixed sample stocks. It should not be treated as live market data or investment advice, and users should confirm the chosen market before relying on its output in a workflow.
The skill description and output examples require Chinese company names and Chinese-formatted output, but there is no indication that users may opt into another language or locale. This can violate language/locale policy when the skill is used in broader contexts beyond a clearly documented region-specific tool.
The skill states it is 'automatically invoked' without defining clear trigger conditions, scope boundaries, or user-consent expectations. In an agent environment, ambiguous auto-invocation can cause the skill to run in unrelated contexts, unexpectedly influence user interactions, or trigger execution of the associated script when the user did not explicitly request stock recommendations.
The module docstring, help text, error messages, and formatted output are all written exclusively in Chinese, which imposes a language choice on users. There is no indication that the tool is intentionally region-specific or that users can opt into another language, matching the policy's language/locale violation criterion.
