Security audit
小果量化因子分析系统助手
Security checks for vulnerabilities and agentic risk
Overview
This skill is a disclosed quantitative finance analysis toolkit that reads market data and writes local analysis outputs, with no evidence of hidden data theft or unsafe persistence.
Install only if you want a Python-based quantitative factor analysis workflow. Run the batch factor scripts in a working copy or dedicated data directory, because generated analysis files may be overwritten when force recalculation is enabled.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.