A股市场情绪量化

• Outcome: Pass
• Latest audit: May 29, 2026 at 8:21 PM UTC
• Version:
  1.0.0

Overview

This is an instruction-only A-share market sentiment helper that gives trading-position guidance but does not install code, request credentials, or execute trades.

Install only if you want an A-share short-term market-sentiment framework that may provide position-sizing suggestions. Treat its output as analysis support, verify market data independently, and do not treat it as authoritative financial advice or an instruction to trade.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

• Confidence: 94% confidence
• Finding: The trigger phrases are broad everyday finance questions such as '今天市场情绪怎么样' and '能不能加仓', which can match ordinary user conversation outside an explicit request to invoke this skill. That creates unintended activation risk, causing the agent to apply trading-stage heuristics and position-sizing advice in contexts where the user did not clearly opt in.

VirusTotal

66/66 vendors flagged this skill as clean.