Investment Daily Report

• Outcome: Pass
• Latest audit: Sep 16, 2026 · 8:10 AM UTC
• Version: 1.0.0

Overview

This skill coherently generates local Markdown investment reports from market data, with no evidence of hidden execution, credential access, persistence, or destructive behavior.

Install only if you are comfortable with a Chinese-language investment-report skill that sends market queries through the local NeoData gateway and writes Markdown reports locally. Treat the report as externally sourced financial content, review it before acting on it, and open generated Markdown in a viewer that disables unsafe HTML, scripts, and external resource loading.

A.I.G

Vulnerability Patterns

• Insecure Skill Coding Practices: Finds exploitable flaws such as hardcoded secrets or command injection
• Skill Instruction Hijacking: Alters the agent's session goals or safety constraints when the skill loads
• Agent Memory Poisoning: Writes attacker-controlled rules into memory that affect later sessions
• Remote Payload Retrieval and Execution: Fetches external code whose behavior can change after review
• Embedded Malicious Code: Ships malicious scripts inside the skill and executes them locally

Findings (1)

T09 · Insecure Skill Coding Practices

Warning

• Location: scripts/generate_report.cjs:81

Finding

Unsanitized Remote Content Written to Generated Markdown Reports

Content

View full analysis

0) { md += `## 📈 A股大盘\n\n`; for (const b of results.cn_overview.slice(0, 2)) { if (b.content) md += fmt(b.content) + '\n\n'; } } if (!quick && results.cn_sectors?.length > 0) { md += `## 🔥 板块轮动\n\n`; md += fmt(results.cn_sectors[0]?.content || '', 1500) + '\n\n'; } if (!quick && results.cn_flow?.length > 0) { md += `## 💰 资金流向\n\n`; md += fmt(results.cn_flow[0]?.content || '', 1200) + '\n\n'; } if (!quick && results.cn_stocks?.length > 0) { md += `## 🚨 个股异动\n\n`; md += fmt(results.cn_stocks[0]?.content || '', 1200) + '\n\n'; } if (!quick && results.events?.length > 0) { md += `## 📢 重要公告\n\n`; for (const b of results.events.slice(0, 3)) { if (b.title || b.summary) md += `- **${b.title || ''}** ${b.summary || ''}\n`; else if (b.content) md += fmt(b.content, 300) + '\n'; } md += '\n'; } if (results.hk_overview?.length > 0) { md += `## 🇭🇰 港股大盘\n\n`; md += fmt(results.hk_overview[0]?.content || '', 1000) + '\n\n'; } if (results.us_overview?.len ...[truncated 2959 chars]

Remediation

View remediation

SkillSpector

Vulnerability Patterns

• Memory Poisoning: Persistent Context Injection, Context Window Stuffing, Memory Manipulation
• MCP Least Privilege: Underdeclared Capability, Wildcard Permission, Missing Permission Declaration
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access

Findings (9)

Natural-Language Policy Violations

Medium

• Category: Not specified by scanner
• Confidence: 91% confidence

Finding

SQP-3 applies to natural-language policy issues in all file types, including markdown. The title, introduction, and usage descriptions are presented only in Chinese, which can amount to a language policy violation when no user opt-in, alternative language option, or explicit region-specific justification is provided.

Content

No source excerpt is available for this finding.

Undeclared Tool Scope

Medium

• Category: MCP Least Privilege
• Confidence: 70% confidence

Finding

Without declared permissions the skill's intent is opaque and cannot be validated.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

• Category: Not specified by scanner
• Confidence: 94% confidence

Finding

The manifest description is written entirely in Chinese and states that the skill generates a structured Markdown daily report, while the rest of the file consistently presents the report format in Chinese. There is no indication that users may choose another language, which constitutes a language/locale policy issue under the natural-language policy rule.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

• Category: Not specified by scanner
• Confidence: 95% confidence

Finding

This markdown file is entirely presented in Chinese, beginning with a Chinese title, with no indication that language selection is optional or user-configurable. The policy for natural-language violations applies to all file types and flags content that forces a specific language without user opt-in.

Content

No source excerpt is available for this finding.

Context Window Stuffing

Medium

• Category: Memory Poisoning
• Confidence: 80% confidence

Finding

Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Content

Scanner excerpt · investment-report-2026-04-20.md (reported line 56)May include surrounding context.

md

## 🚨 个股异动

| 排行类型 | 排序类型 | 股票代码 | 股票名称 | 最新价 | 涨跌幅 | 5日涨跌幅 | 21日涨跌幅 | 60日涨跌幅 | 年初至今涨跌幅 | 涨跌金额 | 换手率 | 量比 | 振幅 | 成交量 | 成交额 | 市盈率 | 市净率 | 总市值 | 流通市值 | 涨速 | 主力净流入 |
| :---: | :---: | :---: | :---: | :---: | :---: | :---: | :---: | :---: | :---: | :---: | :---: | :---: | :---: | :---: | :---: | :---: | :---: | :---: | :---: | :---: | :---: |
| 涨幅（沪深京） | 降序 | sz300540 | 蜀道装备 | 26.64 | 20.00 | -- | -- | -- | -- | -- | 11.91 | 7.06 | 19.73 | -- | -- | -- | -- | 61.15 | 55.07 | -- | -- |
| 涨幅（沪深京） | 降序 | sh688811 | 有研复材 | 23.82 | 20.00 | -- | -- | -- | -- | -- | 51.89 | 2.10 | 20.76 | -- | -- | -- | -- | 119.50 | 21.94 | -- | -- |
| 涨幅（沪深京） | 降序 | sz300518 | 新迅达 | 24.69 | 15.54 | -- | -- | -- | -- | -- | 11.40 | 6.26 | 19.14 | -- | -- | -- | -- | 49.23 | 49.23 | -- | -- |

Natural-Language Policy Violations

Medium

• Category: Not specified by scanner
• Confidence: 96% confidence

Finding

The generated report timestamp is explicitly formatted with toLocaleString('zh-CN', { timeZone: 'Asia/Shanghai' }), and the script’s user-facing strings are all Chinese. This imposes a specific language/locale on output without any opt-in or configurable alternative, which matches the language/locale policy violation criteria.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

• Category: Not specified by scanner
• Confidence: 88% confidence

Finding

The changelog specifies hard-coded Chinese query phrases for skill behavior, which indicates a language constraint in natural-language operation. Because there is no indication here that users can choose another language or that the locale restriction is explicitly justified, this appears to violate the language/locale policy requirement.

Content

No source excerpt is available for this finding.

Missing User Warnings

Low

• Category: Not specified by scanner
• Confidence: 89% confidence

Finding

This is a markdown file, so SQP-2 applies to omissions in user-facing warnings. Line L28 states that the skill generates a file with a default name, but the description does not explicitly warn that execution modifies the local filesystem by creating an output file.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

• Category: Not specified by scanner
• Confidence: 81% confidence

Finding

This markdown file contains user-facing natural language entirely in Chinese, including the title, generation note, data source note, disclaimer, and error message. Under the stated policy, forcing a specific language without user opt-in can be a locale-policy violation, and the file does not indicate any language choice or region-specific justification.

Content

No source excerpt is available for this finding.