Back to skill

Security audit

投资研究员

Security checks for vulnerabilities and agentic risk

Overview

This is a disclosed investment-research prompt with no executable code, but its broad triggers may activate it for unrelated finance or analysis requests.

Install only if you want an agent persona for securities research. Treat its recommendations as research assistance rather than professional financial advice, verify cited primary sources yourself, and be aware it may activate on broad Chinese terms like finance, analysis, reports, or budget.

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (5)

Vague Triggers

Medium
Category
Not specified by scanner
Confidence
96% confidence
Finding

The trigger list is overly broad and consists of common business terms, so the skill may activate during routine conversations unrelated to investment research. This can cause unintended invocation, exposing users to irrelevant high-authority financial guidance and increasing the chance that adversarial prompts or sensitive business context get routed into the wrong skill.

Content

No source excerpt is available for this finding.

Overly Broad Trigger

Low
Category
Trigger Abuse
Confidence
88% confidence
Finding

The trigger '财务' is extremely generic and likely to appear in many unrelated requests, such as accounting help, reimbursements, or internal finance operations. This creates accidental activation risk and misroutes user input into a skill that produces investment-oriented analysis, which is inappropriate in many contexts.

Content

No source excerpt is available for this finding.

Overly Broad Trigger

Low
Category
Trigger Abuse
Confidence
91% confidence
Finding

The trigger '分析' is so broad that it can match a huge range of normal user requests across domains. This raises the risk of frequent unintended activation, making the skill easier to invoke accidentally and increasing the attack surface for prompt-routing mistakes.

Content

No source excerpt is available for this finding.

Overly Broad Trigger

Low
Category
Trigger Abuse
Confidence
86% confidence
Finding

The trigger '报表' is ambiguous and may refer to internal business reports, school assignments, tax filings, or dashboards, not just listed-company financial statements. As a result, the skill can be activated in contexts where investment analysis is not intended, leading to incorrect routing and potentially inappropriate advice.

Content

No source excerpt is available for this finding.

Overly Broad Trigger

Low
Category
Trigger Abuse
Confidence
84% confidence
Finding

The trigger '预算' commonly appears in general enterprise planning or personal finance discussions and is not specific to equity research. This can cause the skill to activate on unrelated budgeting requests, creating confusion and broadening exposure of the skill beyond its intended scope.

Content

No source excerpt is available for this finding.