Security audit

股票操盘宝典

Security checks for vulnerabilities and agentic risk

Overview

This is not malware, but it should be reviewed because it can give broad, actionable stock-trading guidance without clear financial-advice safeguards.

Install only if you want educational help with this specific book’s A-share trading framework. Do not treat its outputs as personalized financial advice or recommendations to buy, sell, or hold securities, and be aware it may activate on broad stock-market questions unless the host agent adds tighter routing and disclaimers.

SkillSpector

Vulnerability Patterns

Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access

Findings (17)

Description-Behavior Mismatch

Medium

Confidence: 83% confidence
Finding: This cheat sheet presents trading heuristics as concise executable rules, including stock-selection gate criteria and action-oriented timing guidance. In a skill explicitly intended to provide A-share trading guidance, that framing can push the content from general education toward actionable investment advice, increasing the risk of users treating it as deterministic or recommendation-like guidance.

Missing User Warnings

Medium

Confidence: 92% confidence
Finding: The digest presents concrete trading tactics and prescriptive rules in a way that can influence real financial decisions, but the warning language appears later and is framed as a critique of the book rather than a prominent user-facing risk disclaimer. In a skill intended to guide A-share trading behavior, this increases the chance that users treat heuristic, non-validated methods as actionable advice and suffer financial harm.

Vague Triggers

Medium

Confidence: 91% confidence
Finding: The trigger list contains broad finance terms such as A股、牛市、熊市、择时、择股、买点、卖点 that are likely to appear in many general investing conversations. This can cause the skill to activate outside its intended niche, exposing users to domain-specific trading guidance when they may have asked for broader market education or neutral analysis.

Missing User Warnings

Medium

Confidence: 88% confidence
Finding: The skill provides actionable trading guidance on timing, buy/sell points, position sizing, and stop-loss rules without a clear warning that the material is educational and not personalized financial advice. In a financial context, users may over-rely on the instructions as authoritative recommendations, increasing the risk of harmful real-world trading decisions and potential compliance issues.

Vague Triggers

Medium

Confidence: 91% confidence
Finding: The trigger phrases are broad enough to match ordinary market-chat questions such as 'can I buy now' or 'should I sell,' which can cause the agent to enter a specialized trading-advice mode too often. In this context, over-activation is risky because the skill is designed to produce actionable market timing guidance, so mistaken routing can influence user financial decisions without sufficient qualification.

Missing User Warnings

Medium

Confidence: 96% confidence
Finding: The skill explicitly instructs the agent to output actionable conclusions like 'buy/sell/hold' based on technical indicators, but it does not require a prominent warning that this is educational content rather than personalized financial advice. Because the output can directly affect trading behavior and user assets, the absence of clear cautionary framing materially increases the risk of harmful reliance.

Vague Triggers

Medium

Confidence: 92% confidence
Finding: The trigger phrases are broad enough to activate on generic indecision language such as '该进还是该等' or 'hold or sell' without reliably confirming the user wants this specific stock-trading framework. In a financial domain, accidental invocation can steer users toward investment-action guidance in situations where they did not explicitly request it, increasing the chance of unsuitable or overconfident advice.

Missing User Warnings

Medium

Confidence: 96% confidence
Finding: The skill translates market judgments into concrete actions like holding, selling, entering, waiting, or reducing positions, but it does not require a visible disclaimer that this is educational information rather than personalized financial advice. Because the content directly concerns asset allocation and trade execution, users may rely on it for real-money decisions and incur financial losses, especially given the authoritative tone and procedural steps.

Missing User Warnings

Medium

Confidence: 90% confidence
Finding: This content gives actionable trading guidance such as waiting for confirmation signals and then entering a position, but it does not warn users that the material is educational only and may lead to financial loss. In a stock-trading skill, omission of a risk disclaimer and suitability warning increases the chance that users treat the instructions as personalized or low-risk advice, which can directly contribute to harmful financial decisions.

Missing User Warnings

Medium

Confidence: 95% confidence
Finding: The skill gives actionable market-entry guidance such as whether to buy, hold cash, or trade based on perceived market phase, but it does not present a clear user-facing warning that this is educational analysis rather than financial advice and that losses can occur. In a trading context, users may over-rely on the guidance as investment advice, increasing the risk of financial harm, especially because the execution steps culminate in recommended trading posture.

Vague Triggers

Medium

Confidence: 93% confidence
Finding: The trigger section is broad enough to activate on ordinary investing questions such as '怎么选股' or '这只票值不值得关注', causing the agent to deliver stock-selection guidance in ambiguous contexts. In a financial domain, overly broad activation increases the chance of unrequested or insufficiently qualified investment advice, which can materially influence user decisions.

Missing User Warnings

Medium

Confidence: 97% confidence
Finding: The skill provides concrete stock-screening heuristics, candidate evaluation steps, and '进池/观望/剔除' style outputs without a clear user-facing disclaimer that the content is educational and not financial advice. Because the workflow is designed to influence security selection and monitoring decisions, users may reasonably treat the output as actionable investment advice, increasing legal, compliance, and consumer-harm risk.

Missing User Warnings

Medium

Confidence: 95% confidence
Finding: This skill provides actionable trading methodology, entry/exit framing, and timing guidance without a clear warning that it is not financial advice and that users may incur losses if they act on it. In a finance-related skill, omission of a risk disclaimer increases the chance that users over-trust the guidance as prescriptive investment advice, especially because the content is presented as a structured, repeatable system.

Vague Triggers

Medium

Confidence: 92% confidence
Finding: The trigger section uses broad phrases such as general A-share, bull/bear market, and timing-related questions without enough narrowing conditions, so the skill could be invoked for ordinary market discussion beyond the intended scope. In a finance-oriented skill, overbroad routing is risky because users may receive strategy guidance from this skill when they actually need a different, more constrained capability or a safer refusal path for investment advice.

Missing User Warnings

Medium

Confidence: 94% confidence
Finding: This skill provides actionable trading guidance about timing, stock selection, position sizing, and loss attribution without an explicit warning that the material is educational and not financial advice. In a finance context, users may treat the content as authoritative operational guidance and make real-money decisions, increasing the risk of financial harm, especially because the skill frames advice as executable rules.

Vague Triggers

Medium

Confidence: 88% confidence
Finding: The capability index defines very broad user intents such as market-phase judgment, stock selection, buy/sell timing, and risk control using open-ended natural-language phrases, but it does not impose explicit trigger boundaries, safety qualifiers, or routing exclusions at the capability-card level. In an investing skill, this can cause overbroad invocation and accidental handling of requests that drift into personalized financial advice, stock recommendations, or deterministic trading guidance that the metadata says should be out of scope.

Missing User Warnings

Medium

Confidence: 95% confidence
Finding: This document provides detailed investment and trading guidance, including market-timing, stock-selection, position sizing, stop-loss, and technical indicator usage, but does not present any user-facing warning about financial risk or clarify that the content is educational rather than personalized financial advice. In the context of an agent skill that may operationalize this material for end users, the omission increases the chance that users treat speculative heuristics as reliable actionable advice and incur financial harm.

Static analysis

No suspicious patterns detected.