Security audit

行业分析师

Security checks for vulnerabilities and agentic risk

Overview

This is a static Chinese-language industry analysis guide with disclosed investment-oriented scoring and no hidden code, persistence, or data access.

Install only if you want a Chinese-language framework for general industry research. Do not rely on its scores or recommendation labels as financial advice, and verify market data, risks, and suitability independently before making investment decisions.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (7)

Natural-Language Policy Violations

Medium

Confidence: 88% confidence
Finding: The title uses Chinese as the default skill language presentation, and the rest of the README continues exclusively in Chinese without indicating that other languages are supported. Under the policy, forcing a specific language without user opt-in is a natural-language policy concern unless the locale restriction is explicitly documented and justified.

Vague Triggers

Medium

Confidence: 94% confidence
Finding: The skill’s activation text uses broad triggers such as 'when the user needs to quickly understand an industry' and 'when the user asks whether the industry is worth investing in,' which can cause the agent to invoke it in many loosely related contexts. In a finance-adjacent skill, overbroad routing increases the chance that users receive investment-oriented analysis when they asked for general information, amplifying inappropriate financial influence.

Missing User Warnings

Medium

Confidence: 95% confidence
Finding: The skill provides explicit investment scoring and recommendations such as 'strongly recommend/recommend/observe/avoid' without a clear warning that the output is informational only and not financial advice. Because the skill directly frames industries in investability terms, users may treat its output as actionable advice, creating elevated risk of harmful financial decision-making.

Natural-Language Policy Violations

Medium

Confidence: 91% confidence
Finding: The entire skill file is written only in Chinese, with no indication that users may choose another language or that the content is intentionally limited to a Chinese-language or China-specific audience. Under the stated policy, forcing a specific language without user opt-in is a natural-language policy concern.

Natural-Language Policy Violations

Medium

Confidence: 95% confidence
Finding: The entire skill reference is written in Chinese and does not indicate that users may choose another language or that the skill is intentionally limited to a Chinese-speaking or region-specific context. Under the policy, forcing a specific language without user opt-in is a natural-language locale violation.

Natural-Language Policy Violations

Low

Confidence: 71% confidence
Finding: The entire skill, including invocation description and outputs, is fixed in Chinese, and there is no indication that the user can choose another language or that the skill is intentionally limited to a Chinese-language audience. Under the language/locale policy, a forced locale without opt-in or documented justification is a natural-language policy concern.

Natural-Language Policy Violations

Low

Confidence: 96% confidence
Finding: This markdown template presents all user-facing instructions exclusively in Chinese, which imposes a specific language on users without any indication of language selection or opt-in. Under the policy rules, forcing a language or locale without user choice is a natural-language policy concern.

Static analysis

No suspicious patterns detected.