Security audit
Security checks for vulnerabilities and agentic risk
This is a simple crypto sentiment analysis skill with disclosed external data sources and no hidden code, persistence, or destructive behavior.
Before installing, be aware that this skill may activate on broad sentiment-related phrases and may use external market or social-media data sources when invoked. Treat outputs as market sentiment analysis, not financial advice.
The trigger list includes generic terms such as "crypto," "sentiment," and the Chinese term "情绪," which are broad enough to match many unrelated conversations and cause unintended skill activation. In a market-analysis skill, accidental invocation can expose user queries to external-data workflows or produce financial-analysis outputs in contexts where the user did not intend to engage this skill.
The skill hard-codes Chinese trigger terms like "比特币" and "情绪" without explaining locale targeting, language-selection behavior, or user consent for multilingual activation. This can make the skill activate unexpectedly for Chinese-language conversations, especially because "情绪" is a very broad term, increasing the chance of unintended routing.
