Security audit
Security checks for vulnerabilities and agentic risk
The skill is a simple Chinese stock-analysis guide, but it gives direct buy/sell-style investment recommendations without enough financial-advice guardrails.
Review this skill carefully before installing if you might rely on it for real investment decisions. Treat its outputs as an educational framework only, not personalized financial advice, and consider adding clear disclaimers plus prompts for time horizon, risk tolerance, and independent verification before any recommendation is shown.
The title and all visible documentation in this file are written exclusively in Chinese, with no indication that the user can choose another language or locale. Under the policy rule, a skill that forces a specific language without user opt-in is a natural-language policy concern.
The skill metadata says it should activate whenever a user 'needs stock picking' or asks whether a company is worth investing in, which are broad, common triggers likely to over-invoke the skill in ordinary finance conversations. Overly broad activation can cause the agent to deliver prescriptive investment analysis in contexts where the user did not explicitly request this methodology, increasing the chance of unsuitable or overconfident financial guidance.
The skill provides direct recommendation labels such as '强烈买入 / 买入 / 不买入' and investment scoring without a clear, proximate disclaimer that the output is educational and not financial advice. In this context, the structured recommendation language can be interpreted as personalized financial advice, which raises user-harm and compliance risk if relied on for real investment decisions.
The file gives concrete stock evaluation and a directional recommendation ('不买入', '观察') without a clear disclaimer that the content is informational only and not personalized investment advice. In a stock-picking skill, users may reasonably rely on this as financial advice, increasing legal/compliance risk and the chance of harmful financial decisions.
This markdown file presents all instructional content in Chinese and does not indicate that the user can choose another language. Under the policy, forcing a specific language without user opt-in is a natural-language policy violation unless the locale constraint is clearly documented and justified.
The entire template, including headings and field labels, is written only in Chinese and provides no indication that users may choose another language. Under the policy, forcing a specific language without opt-in is a natural-language policy violation unless the locale restriction is clearly documented and justified.
全文仅以中文呈现，且未说明这是面向特定中文用户群体的区域性示例，也未提供语言选择或用户 opt-in。根据 SQP-3，若技能在自然语言层面隐含强制特定语言/locale 而没有选择机制，可能构成语言或区域政策问题。
No suspicious patterns detected.
