News Sentiment Analysis

• Outcome: Pass
• Latest audit: May 29, 2026 at 8:22 PM UTC
• Version:
  1.0.0

Overview

This is an instruction-only Chinese A-share news analysis skill that gives trading heuristics but does not access accounts, files, credentials, or execute trades.

Install only if you want Chinese-language A-share news sentiment heuristics. Because it may produce buy, chase, or position-size suggestions, verify market facts independently and do not treat its output as professional financial advice.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

• Confidence: 91% confidence
• Finding: The trigger phrase examples are very short and generic, especially phrases like '能追吗' and '这个利好是真的吗', which can overlap with ordinary conversation outside the intended stock-analysis context. This can cause unintended invocation of the skill and lead the agent to provide financial-trading guidance when the user did not explicitly request this specialized behavior.

VirusTotal

63/63 vendors flagged this skill as clean.