Security audit
Security checks for vulnerabilities and agentic risk
This is a markdown-only stock-analysis helper with disclosed web research behavior and no code execution, persistence, credential access, or account-changing authority.
Installers should understand this skill may answer in Chinese and may analyze U.S. tickers despite being described mainly as Chinese stock analysis. Treat its buy, hold, and sell outputs as informational only and verify financial decisions independently.
The required response template is entirely in Chinese and the workflow instructs the model to use Chinese query formats and wording, which effectively imposes a language preference on all users. This is a natural-language policy issue because the file does not offer opt-in or an alternative language despite also supporting non-Chinese markets like US tickers.
This markdown file is largely written in Chinese, including headings, sector labels, descriptions, and search tips, while also mixing in English market sections. There is no indication that the user can choose another language or that the skill is intentionally restricted to a Chinese-language audience, which may violate a language/locale policy requiring opt-in or documented justification.
The manifest describes the skill as analyzing Chinese stock prices for A-shares and Hong Kong stocks. This reference file expands the skill's operational scope by including a dedicated U.S. stocks section with major U.S. companies and U.S.-listed Chinese concept stocks, which is broader than the stated scope.
The manifest description limits the skill to Chinese stock analysis covering A-shares and Hong Kong stocks. However, the supported markets table explicitly includes US tickers such as AAPL, TSLA, and NVDA, expanding the skill's stated behavioral scope beyond Chinese companies.
No suspicious patterns detected.
