Back to skill

Security audit

a-stock-position-management

Security checks for vulnerabilities and agentic risk

Overview

This is a Markdown-only Chinese A-share position-sizing guide with no code, installation behavior, data access, persistence, or account-control capability.

Install only if you want a Chinese-language A-share position-management reference. Treat its percentage limits and stop-loss rules as educational heuristics, not personalized investment advice, and confirm before acting on any trading recommendation.

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (3)

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
97% confidence
Finding

The skill gives direct position-sizing and stop-loss recommendations tied to market conditions, but it does not warn users that the output is not financial advice and may lead to losses. In the context of trading, this omission materially increases risk because users may over-rely on the guidance as authoritative investment advice and suffer financial harm.

Content

No source excerpt is available for this finding.

Vague Triggers

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

The trigger phrases are short, common conversational questions such as '能加仓吗' and '要不要减仓', which creates a real risk of unintended activation in ordinary finance discussions. In this skill, accidental activation is more dangerous because the skill produces concrete position-management guidance that can influence trading behavior and user assets without clear gating or confirmation.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
86% confidence
Finding

The description and all user-facing content are written only in Chinese, with no indication that the user can choose another language or that the skill is intentionally limited to Chinese-language interaction. Under the language/locale policy, forcing a specific language without user opt-in can be a natural-language policy violation unless the constraint is explicitly documented and justified.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.