Back to skill

Security audit

Ai Trading Consortium

Security checks for vulnerabilities and agentic risk

Overview

This is a disclosed stock-research skill with no executable or persistence behavior, but it can produce actionable trade-style outputs that users should treat only as research.

Install only if you want an educational stock-research workflow that may generate buy/sell/hold-style analysis, price targets, stop-losses, and position-sizing examples. Do not treat its outputs as personalized financial advice or let them drive real trades without independent review by a qualified professional.

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
  • Memory PoisoningPersistent Context Injection, Context Window Stuffing, Memory Manipulation
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Findings (3)

Memory Manipulation

High
Category
Memory Poisoning
Confidence
80% confidence
Finding

Skill manipulates agent memory, state, or stored context. Memory corruption can alter personality, override safety rules, or cause unpredictable behavior.

Content

Scanner excerpt · SKILL.md (reported line 852)May include surrounding context.

md
## Thesis & Exit Criteria
**Investment Thesis**:
[Clear statement of why we're making this trade]

**Exit Triggers**:
- [ ] Target price reached

Vague Triggers

Medium
Category
Not specified by scanner
Confidence
92% confidence
Finding

The manifest advertises very broad trigger phrases such as stock analysis, trading decision, investment analysis, and buy/sell/hold recommendation, which can cause the skill to activate on common finance-related requests without clear scoping. In a multi-skill environment, this increases the chance of inappropriate routing into a workflow that produces high-risk financial content and execution-style outputs.

Content

No source excerpt is available for this finding.

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

Although the file later says not to provide financial advice, the skill prominently defines actionable recommendation outputs including BUY/SELL/HOLD, trade orders, stop-losses, targets, and execution plans. That mismatch makes the safety warning ineffective in practice and can steer the agent into generating personalized or execution-oriented financial guidance despite the nominal disclaimer.

Content

No source excerpt is available for this finding.