Security audit
悟道 · A股市场情报
Security checks across malware telemetry and agentic risk
Overview
This skill is a disclosed A-share market data helper that uses a user-provided API key for read-only stock intelligence endpoints.
Install only if you intend to use the stock.quicktiny.cn market-data API. Keep LB_API_BASE pointed at the expected provider URL, protect and rotate the API key as needed, and treat the returned market analysis as informational rather than investment advice.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
58/58 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.