A Stock Radar

• Outcome: Pass
• Latest audit: May 29, 2026 at 8:42 PM UTC
• Version:
  2.1.1

Overview

This skill fetches public A-share market data and gives market commentary, including position-style suggestions, but it does not access accounts or execute trades.

Install only if you are comfortable with an agent providing A-share market analysis and position-style commentary. Do not treat its outputs as investment advice, and review the scripts/dependencies before running them in an environment with network access.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

• Confidence: 88% confidence
• Finding: The invocation description includes broad triggers such as buy/sell, add/reduce positions, and position sizing advice. Even with a disclaimer, these generic triggers can cause the skill to activate in high-stakes financial decision contexts too readily, increasing the chance of overbroad delegation, unsuitable advice, or unintended automated decision support.

VirusTotal

64/64 vendors flagged this skill as clean.