Security audit
Chan Signal
Security checks for vulnerabilities and agentic risk
Overview
This skill is a disclosed stock technical-analysis helper that fetches public market data, runs local calculations, and does not show hidden credential access, account actions, or destructive behavior.
Before installing, understand that this skill can produce investment-related suggestions from technical indicators. It fetches public quote data over the network and caches that market data locally in a temporary folder. Treat its output as reference material only, verify the dependencies you install, and do not treat the generated buy/sell signals as financial advice.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.