Security audit
investoday-sector-research-interpretation
Security checks for vulnerabilities and agentic risk
Overview
This is a coherent finance research skill that queries a disclosed market-data dependency to summarize sector research, with no executable code or persistence.
Safe to install from the inspected artifacts. Users should understand that sector or theme queries are processed through the separate 今日投资 finance data skill, and that the generated reports are market research summaries, not personalized investment advice.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.