Security audit
Security checks for vulnerabilities and agentic risk
This is a plain Markdown stock-analysis skill with some scope and language-quality issues, but no hidden code, persistence, credential access, or destructive behavior.
Install only if you want a China-focused stock-analysis helper. Be aware it may also respond to some US-stock prompts and may default to Chinese formatting. Verify live market data independently and do not treat its buy, hold, or sell output as professional financial advice.
The skill description is broad enough to match generic stock-analysis requests, including non-Chinese equities, which can cause unintended routing and overbroad invocation. This is dangerous because it may override a more appropriate specialized skill, increase tool use on loosely related prompts, and produce lower-quality or misleading financial guidance outside the intended scope.
The mandated output template is written in Chinese and effectively steers responses into Chinese regardless of the user's language preference. This is risky because it can degrade usability, cause language-mismatch failures, and reduce clarity for users expecting English or another language, especially in financial contexts where precision matters.
The document is primarily written in Chinese and provides search instructions using Chinese-language query terms, but it does not indicate that language choice is optional or that the reference is intended only for Chinese-speaking users. Under the language/locale policy, fixed language assumptions without opt-in can be a natural-language policy concern.
No suspicious patterns detected.
