Security audit

investoday-stock-financial-analysis

Security checks for vulnerabilities and agentic risk

Overview

This skill gives structured A-share stock financial analysis using disclosed public market data APIs and does not show hidden execution, storage, mutation, or privilege behavior.

Install this if you want Chinese-language A-share financial report analysis using the Investoday finance data dependency. Treat outputs as informational only; the skill itself says it should not provide buy/sell advice, target prices, position sizing, or timing recommendations.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (3)

Vague Triggers

Medium

Category: Not specified by scanner
Confidence: 94% confidence
Finding: L005 将触发词定义为“财务分析、盈利能力、现金流、资产负债、偿债能力、利润质量”等通用财经术语，这些词本身覆盖面很广，容易出现在普通讨论、教育解释或非个股分析场景中。文档没有给出明确边界或排除条件来说明何时应触发该技能、何时不应触发，因此存在歧义。
Content: No source excerpt is available for this finding.

Vague Triggers

Medium

Category: Not specified by scanner
Confidence: 91% confidence
Finding: L029-L032 将触发场景表述为“用户询问某只股票的财务情况”“这家公司财务稳不稳”等宽泛自然语言，并附加大量泛关键词，但未说明必须满足哪些最小条件才调用该技能。缺少负面示例或排除条件，容易与一般性股票讨论、概念解释或其他分析技能产生重叠。
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 83% confidence
Finding: L003 标题及全文均以中文固定描述技能输出和交互方式，没有看到允许用户指定语言或根据用户偏好切换语言的说明。按照语言/locale 政策，若技能默认强制单一语言且无用户选择，可能构成自然语言政策层面的限制。
Content: No source excerpt is available for this finding.