Security audit
Security checks for vulnerabilities and agentic risk
This is a Markdown-only Chinese value-investing analysis skill with no executable behavior, but users should treat its buy/safety labels as educational screening rather than financial advice.
Install only if you want a Chinese-language Graham/value-investing screening aid. Verify all market data independently, treat its recommendation labels as informational, and do not make trades solely from the skill output.
The entire README is written in Chinese, beginning with the title on L01, and there is no indication that users may choose another language or that the skill is intentionally limited to a Chinese-speaking context. Under the policy, forcing a specific language without user opt-in is a natural-language policy violation.
The skill description includes broad, conversational triggers such as asking whether a stock is 'safe' or requesting initial screening, which can cause the skill to activate on ordinary financial discussions without a clear, narrow scope. In a finance context, overbroad activation is risky because it can inject authoritative-seeming investment analysis and recommendations where the user did not explicitly request structured valuation guidance.
The skill provides direct recommendation labels such as '强烈买入', '买入', '观察', and '不买入' without an explicit warning that the output is educational information rather than financial advice. Because the skill presents a systematic framework and concrete action language, users may rely on it as personalized investment advice, increasing the risk of financial harm or regulatory issues.
This markdown skill/example forces a specific language for all user-facing content, which can violate language or locale policy when no user opt-in or alternative is provided. The document contains no indication that Chinese is optional, configurable, or required for a region-specific purpose.
The natural-language instructions, parameters, and outputs are entirely in Chinese, and the skill does not indicate that language selection is optional or user-configurable. Under the stated policy, forcing a specific language without user opt-in can be a language/locale policy violation unless clearly justified.
该文件全文以中文呈现，且未说明这是特定地区/语言受众限定的参考资料，也未提供用户可选择其他语言或本地化的说明。根据规则，强制特定语言且无用户选择或明确合理性说明，属于自然语言层面的语言/区域策略问题。
