邱国鹭品质分析

• Outcome: Pass
• Latest audit: May 29, 2026 at 8:25 PM UTC
• Version:
  2.0.0

Overview

This is a markdown-only investment quality checklist skill with no code execution, credential access, persistence, or hidden behavior.

Install this only if you want a simplified company-quality checklist in a 邱国鹭-style framework. Treat outputs as educational analysis, verify financial data independently, and do not rely on it as complete investment advice or a buy/sell recommendation.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

• Confidence: 94% confidence
• Finding: The manifest description uses very broad activation phrases such as '当用户需要分析公司品质时' and '当用户问"这是好公司吗"时', which can cause the skill to trigger for vague, ordinary investment questions without clear user intent. This is not a code-execution issue, but it can lead to over-selection of the skill, inappropriate financial-analysis framing, and reduced routing precision in a system that auto-selects skills from descriptions.

VirusTotal

65/65 vendors flagged this skill as clean.