ClawHub
Back to skill

Security audit

ZJTJ-SAR四维选股策略

Security checks for vulnerabilities and agentic risk

Overview

This is a transparent stock-trading strategy skill with financial-risk caveats, but it contains no hidden code, persistence, credential use, or privileged behavior.

Before installing, understand that this skill can produce speculative short-term trading guidance and may be wrong, especially because one SAR explanation appears inconsistent with its formula. Do not treat its outputs as financial advice; verify signals independently and avoid connecting it to any trading workflow that could place orders automatically.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (3)

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
97% confidence
Finding

The skill presents concrete stock-selection and trading rules, position sizing, and buy/sell signals without a clear warning that it is not financial advice and may lead to monetary loss. In this context, missing risk disclosure is more dangerous because the content is explicitly designed for short-term A-share trading, where users may rely on the guidance as authoritative and suffer real financial harm.

Content

No source excerpt is available for this finding.

Intent-Code Divergence

Medium
Category
Not specified by scanner
Confidence
97% confidence
Finding

The formula SAR < C implies SAR is below price, which is typically bullish, but the accompanying explanation says 'SAR在K线上方', reversing the meaning. In a financial decision-support skill, contradictory signal logic can directly cause users or downstream agents to take the opposite trade from the intended strategy, creating avoidable asset loss risk.

Content

No source excerpt is available for this finding.

Vague Triggers

Medium
Category
Not specified by scanner
Confidence
94% confidence
Finding

The trigger phrase '帮我选一个短线股票' is very broad and can match ordinary user requests, causing this skill to activate in contexts where the user did not explicitly request this specific high-risk trading strategy. Because the skill influences financial decisions, over-broad invocation increases the chance of unsolicited or inappropriate strategy application that may materially affect user assets.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.