Security audit
stock-scheme-tracker
Security checks for vulnerabilities and agentic risk
Overview
This skill coherently saves and checks stock strategy notes in a user-chosen local Markdown file, with no evidence of credential collection, hidden networking, trading execution, or exfiltration.
Use a dedicated Markdown file for STOCK_SCHEME_PATH, ideally under your home directory, because the save script will create or overwrite the configured file directly. If check mode uses web or finance tools, keep external queries limited to public ticker symbols and metrics rather than sending your saved strategy details.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.