financial roe analysis

• Outcome: Pass
• Latest audit: May 28, 2026, 9:38 AM
• Version:
  1.0.0

Overview

This is a finance-analysis guide that uses public company financial data and does not contain code execution, credential use, persistence, or destructive behavior.

Install this if you want a Chinese-language ROE/DuPont financial analysis workflow. Because it works in a financial domain, verify source data and citations yourself, and treat outputs as research support rather than professional investment advice.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

• Confidence: 88% confidence
• Finding: The trigger phrases are broad enough to match common, ambiguous finance-related queries such as general company or stock analysis requests. This can cause unintended invocation of the skill, leading the agent to apply a specialized financial-analysis workflow when the user may have intended a different task or a more general response.

VirusTotal

VirusTotal findings are pending for this skill version.