Security audit
options-strategist
Security checks for vulnerabilities and agentic risk
Overview
This documentation-only options analysis skill coherently uses a declared Finskills API key to fetch market data and does not install code or perform trades.
Install only if you are comfortable using Finskills for market-data lookups. Store FINSKILLS_API_KEY as an environment variable or secret, do not paste it into prompts or commit it to source control, and verify options calculations before making any trading decision.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.