Security audit
Security checks for vulnerabilities and agentic risk
This skill is a disclosed A-share stock news analysis workflow that uses public financial data APIs and does not show hidden execution, persistence, or unsafe data handling.
Before installing, confirm you are comfortable with the skill sending stock names or codes from your requests to the Investoday finance-data integration. Treat its outputs as informational market analysis only, not trading advice.
The trigger list includes broad generic phrases like “最近新闻”, “消息面”, and “利好利空”, which can match many ordinary finance queries and cause this skill to activate when a more specific or safer skill would be more appropriate. Over-broad invocation can lead to unintended tool use, incorrect routing, and user confusion, especially in environments where skill activation triggers external data access.
The activation scenarios are written broadly enough to cover overlapping intents such as recent news, catalysts, risks, and market reaction without strong boundary checks. This increases the chance of the agent invoking this skill for loosely related requests, which can produce mismatched analyses and unnecessary external API calls.
The title and the entire skill specification are presented solely in Chinese, with no indication that users may choose another language or locale. Under the policy, a skill should not force a specific language unless it offers opt-in or clearly documents a justified locale restriction.
No suspicious patterns detected.
