Professional Stock Analysis Agent

• Outcome: Pass
• Latest audit: May 28, 2026, 8:21 AM
• Version:
  1.0.0

Overview

This is a markdown-only stock analysis skill that gives investment-analysis frameworks and does not request code execution, credentials, persistence, or account access.

Use this as an informational investment-analysis aid, not as licensed financial advice. Verify market data, assumptions, and recommendations independently before making investment decisions.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

• Confidence: 89% confidence
• Finding: The skill description is broad enough to trigger on generic investing or market-analysis requests without clear boundaries, which can cause the agent to activate in contexts where specialized financial advice should be more tightly scoped. In a stock recommendation skill, overbroad invocation increases the chance of unsolicited or insufficiently qualified investment guidance being presented as authoritative analysis.

VirusTotal

VirusTotal findings are pending for this skill version.