Security audit
investoday-sector-research-interpretation
Security checks across malware telemetry and agentic risk
Overview
This is a coherent finance research skill that queries a disclosed market-data dependency to summarize sector research, with no executable code or persistence.
Safe to install from the inspected artifacts. Users should understand that sector or theme queries are processed through the separate 今日投资 finance data skill, and that the generated reports are market research summaries, not personalized investment advice.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
63/63 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.