Security audit

Alphagbm Fear Score

Security checks for vulnerabilities and agentic risk

Overview

This skill is a disclosed ticker-based market fear score, but users should treat its options timing output as informational rather than financial advice.

Install only if you want ticker-level options sentiment and timing support. Treat the score as one research input, not personalized financial advice, and do not place options trades solely because the skill reports a signal; options strategies can lose substantial money.

SkillSpector

Vulnerability Patterns

Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (2)

Vague Triggers

Medium

Confidence: 91% confidence
Finding: The trigger list includes very broad investing phrases such as 'is it fear time', 'when to sell put', and 'oversold reading', which can cause the skill to activate in contexts the user did not clearly intend. In a financial-decision skill, overly permissive activation increases the chance of unsolicited or mis-scoped trading guidance being surfaced, which can mislead users or override more appropriate tools.

Missing User Warnings

Medium

Confidence: 95% confidence
Finding: The skill explicitly promotes Bull Put Spread and sell-put entry timing using backtest performance claims, but it does not include any risk disclosure, uncertainty caveat, or statement that the output is decision support rather than personalized financial advice. In a trading context, this omission makes the skill more dangerous because users may over-trust a single score and historical performance framing when making real-money options decisions.

Static analysis

No suspicious patterns detected.