Security audit

Stock Simulator

Security checks for vulnerabilities and agentic risk

Overview

This skill is a disclosed virtual stock-trading simulator that uses local simulated records and market-data lookups, with no evidence of hidden access, credential theft, or destructive behavior.

Install only if you are comfortable with a Chinese-language stock simulator that creates local simulated portfolio files and may run a user-created Python quote-fetching script. Review any proxy settings before enabling them, and treat stock recommendations as educational rather than financial advice.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access

Findings (4)

Natural-Language Policy Violations

Medium

Confidence: 90% confidence
Finding: The manifest description is written entirely in Chinese and presents the skill's purpose and usage only in that language, with no indication that users may interact in other languages or that the skill is intentionally limited to a Chinese-speaking audience. Under the policy, forcing a specific language without user opt-in is a natural-language policy concern.

Vague Triggers

Medium

Confidence: 82% confidence
Finding: The activation phrase "模拟炒股" is broad enough that the skill may trigger on generic discussion about stock simulation or investing, potentially causing unintended invocation and data-handling actions. In this context the impact is limited because the skill is framed as a simulator, but broad routing can still lead to confusion, undesired network calls, or accidental modification of simulated portfolio records.

Context-Inappropriate Capability

Low

Confidence: 86% confidence
Finding: The skill documentation instructs the agent/user to create and run a standalone Python script that performs live network access and supports optional proxy configuration. Even though the script appears functionally related to stock simulation, this expands the trust boundary outside the skill itself, introduces executable code from documentation, and could enable SSRF-like egress, proxy misuse, or unsafe execution in environments where skills should not direct arbitrary code execution.

Natural-Language Policy Violations

Low

Confidence: 93% confidence
Finding: This markdown file presents all instructions and examples in Chinese only, and does not indicate that users may request another language or that the skill is intentionally limited to a Chinese-speaking or China-specific audience. Under the language/locale policy check, forcing a single language without opt-in can be a natural-language policy violation.

Static analysis

No suspicious patterns detected.