Security audit
Security checks for vulnerabilities and agentic risk
This skill fetches public futures and commodity prices from Yahoo Finance and does not show hidden, destructive, or persistent behavior.
Install this only if you are comfortable with the skill making Yahoo Finance network requests for live market data. Expect Chinese-language output and broad activation around commodity or futures terms, but the inspected artifact does not request credentials, modify files, or install persistence.
The skill includes executable example code that performs outbound network access to Yahoo Finance, but the manifest does not declare any tool scope or permission boundary. This creates a transparency and governance gap: the agent may invoke network-capable behavior without an explicit contract, making review, sandboxing, and user consent harder.
The trigger list contains broad commodity- and market-related phrases such as '原油', '黄金', and '期货行情', which can cause the skill to activate in contexts where the user did not intend live data retrieval. Over-broad activation can lead to unnecessary network calls, context hijacking, or confusing responses from the wrong skill.
The skill description and code show that it retrieves external data from Yahoo Finance, but there is no clear user-facing notice at invocation time that a third-party network request will occur. Lack of disclosure reduces informed consent and can surprise users in privacy- or policy-sensitive environments where external calls are restricted.
文件整体说明与技能名称展示均固定为中文，且未说明可根据用户偏好切换语言或接受其他语言输入。若组织要求避免未经用户同意强制特定语言/地区设置，这种单一语言约束可能构成自然语言策略违规。
The manifest frames the skill around commodities/futures queries such as crude oil, gold, silver, natural gas, copper, and broad commodity market monitoring. However, the implemented symbol set extends beyond commodities into rate products (10Y/30Y Treasury futures) and a macro FX index (DXY), which materially broadens the skill's functional scope.
The module description and user-facing output strings are all in Chinese, with no indication that the user can choose another language or that the locale is intentionally restricted. This can violate language/locale policy when a skill forces a specific language without opt-in.
The script sends HTTP requests to an external Yahoo Finance endpoint, which exposes the user's system IP/addressing metadata and request details to a third party. While this network access is core to the skill's purpose, the code itself provides no explicit comment or warning that external requests are being made.
No suspicious patterns detected.
