Security audit
Security checks for vulnerabilities and agentic risk
This skill creates an investment morning report and its file/knowledge-base outputs are disclosed, though users should be aware it may archive financial context.
Install only if you are comfortable with the skill reading finance-related workspace reports and creating an archived investment summary. Use explicit investment-report prompts, and review or disable IMA sync if portfolio/watchlist details should not be stored in that knowledge base.
The README states that reports are saved to disk and synchronized to an IMA knowledge base, but it does not indicate any user notice, consent flow, or ability to opt out. Because the generated report may include portfolio movements, watchlist signals, and other potentially sensitive financial context, automatic persistence and archiving create unnecessary privacy and data-governance risk.
The trigger phrases are broad enough to activate on generic user requests like '今日概览' or 'morning note' without clearly scoping that the action will generate and persist an investment report. In a skill that also performs file saving and optional knowledge-base synchronization, overbroad triggering increases the chance of unintended execution and downstream data handling without explicit user intent.
Suspicious Unicode normalization or mixed-script content
The trigger set includes broad phrases like '早报', 'morning note', and '今日概览', which are common user requests and may cause the skill to activate unexpectedly. Because the skill writes files and later syncs summaries into an external knowledge base, accidental invocation can lead to unintended data collection, report generation, and persistence of user/workspace-derived content.
The skill description does not clearly warn that it will write a report under the working directory and synchronize content into the IMA knowledge base. This lack of disclosure is risky because the workflow reads workspace reports and user-related financial signals, then persists derived content to local storage and a secondary system, which can surprise users and create privacy or data-governance issues.
The README presents the skill entirely in Chinese and describes output as a fixed-format晨报 without indicating that users may choose another language. This suggests a language constraint that is not offered as an opt-in or configurable choice.
No suspicious patterns detected.
