Security audit
Security checks for vulnerabilities and agentic risk
This skill is a straightforward Hong Kong stock research workflow with scoped public-market data use and no hidden persistence or destructive behavior.
Before installing, understand that the skill helps structure HK stock analysis and prediction questions, but it should not be treated as financial advice. Check any market data and forecasts against current, reliable sources, and choose your preferred response language if Chinese output is not desired.
Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.
This copies:
- `skills/hk-stock-predictor/SKILL.md`
to:
Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.
This copies:
- `skills/hk-stock-predictor/SKILL.md`
to:
Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.
ls -la ~/.codex/skills/hk-stock-predictor
Code scans file system directories looking for sensitive files. This could be reconnaissance for credential theft.
ls -la ~/.codex/skills/hk-stock-predictor
The README describes the skill's target use case and goal entirely in a Chinese-language workflow context, which can function as a language/locale constraint. There is no indication that users may use another language or opt into this locale-specific behavior, and no explicit justification that the skill is limited to Chinese-only operation.
The summary template is written entirely in Chinese and instructs the agent to produce headings and labels in Chinese. This creates a language/locale constraint without offering the user a choice or documenting that the skill is region-specific in a way that justifies mandatory Chinese output.
No suspicious patterns detected.