交易教练Pro

• Outcome: Pass
• Latest audit: May 29, 2026, 8:44 PM
• Version:
  1.0.0

Overview

This is a text-only Chinese trading-coach skill that can give risky financial suggestions, but it does not install code, access accounts, or execute trades.

Install only if you want an assistant to generate trading analysis from data you provide. Treat outputs as educational suggestions, verify the market data and assumptions yourself, and do not rely on it alone before risking money.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• MCP Tool Poisoning: Hidden Instructions, Unicode Deception, Parameter Description Injection
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access

Findings (2)

Vague Triggers

Medium

• Confidence: 90% confidence
• Finding: The invocation guidance is extremely broad: any K-line description or screenshot analysis leads to 'complete trading advice' without defining when the skill should or should not activate, what inputs are required, or what safety boundaries apply. In an agent environment, this can cause over-invocation, misuse on insufficient data, and unqualified financial recommendations, increasing the risk of harmful or misleading trading decisions.

Natural-Language Policy Violations

Medium

• Confidence: 82% confidence
• Finding: The skill content is written as Chinese-only and does not offer language selection or fallback behavior, which can cause users or orchestrating agents to misunderstand the scope, warnings, or outputs. In a financial coaching context, language mismatch can materially increase the chance that risk controls, assumptions, and limitations are missed, leading to bad decisions.

VirusTotal

62/62 vendors flagged this skill as clean.