Security audit
小果聚宽策略量化助手
Security checks across malware telemetry and agentic risk
Overview
This is a text-only JoinQuant trading strategy helper whose trading, data, and notification examples match its stated purpose, but users should review generated strategies before running them.
Install only if you want help writing JoinQuant strategies. Treat generated code as financial automation: backtest first, verify order sizes, schedules, margin/credit use, file reads/writes, and any notification recipients or credentials before enabling simulated or real trading workflows.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
65/65 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.