Back to skill

Security audit

HyperGrok Desk Strategy Lab

Security checks for vulnerabilities and agentic risk

Overview

This skill is a disclosed trading-strategy lab guide that creates local research artifacts and explicitly avoids real order execution.

Before installing, be aware this is for financial strategy research and paper trading only. Review any generated backtest code and data requests, keep real account credentials out of the workflow unless separately required by trusted tools, and do not treat backtest output as trading advice.

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Static analysis

No suspicious patterns detected.