Security audit
虾皮A股涨跌停股分析
Security checks for vulnerabilities and agentic risk
Overview
This skill is a disclosed stock market analysis workflow that uses DaxiAPI data and has manageable token and dependency handling considerations.
Install this only if you intend to use DaxiAPI for A-share market data. Configure the API token carefully, avoid showing token values in shared logs or chat output, and consider reviewing or pinning the `daxiapi-cli` package instead of relying on `@latest`.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.