智囊团2号Ai巴菲特

• Outcome: Pass
• Latest audit: May 29, 2026, 8:28 PM
• Version:
  1.0.0

Overview

This skill is a disclosed Buffett-style investment analysis aid with no executable code or hidden system access, but users should treat its financial guidance cautiously.

Install this only if you want an assistant to perform investment research and Buffett-style valuation analysis. Verify financial data against primary sources, consider your jurisdiction, risk tolerance, and time horizon, and do not treat buy, sell, or position-size output as a substitute for qualified financial advice.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

• Confidence: 88% confidence
• Finding: The trigger scope is broad enough to activate on many investment-related requests, which can cause the skill to engage when the user did not explicitly ask for Buffett-style analysis or portfolio guidance. In a financial-advice context, over-triggering is risky because it can lead to unsolicited or overly prescriptive investment recommendations, increasing the chance of unsuitable guidance and user confusion.

VirusTotal

64/64 vendors flagged this skill as clean.