Security audit
Security checks for vulnerabilities and agentic risk
This is a simple market-cycle guidance skill with no executable code, persistence, credential use, or hidden local access, though users should treat its trading posture as informational rather than personalized financial advice.
Before installing, understand that this skill can return direct market posture suggestions such as buying aggressively, trimming, or using options protection. Use it as a market-sentiment framework, not as personalized financial advice or an instruction to trade automatically.
The trigger list is broad enough to match ordinary market-commentary requests, which can cause the skill to activate outside a clearly scoped user intent. In a financial skill, this increases the chance of unsolicited or overconfident trading-oriented guidance being injected into general conversations about markets.
The documented output schema hardcodes both posture_zh and posture_en, which introduces language behavior without stating how user preference is selected or whether multilingual output is optional. Under the language/locale policy, language handling should be user-directed or clearly justified.
