Security audit
Security checks for vulnerabilities and agentic risk
This is a markdown-only stock-analysis skill that asks the agent to gather public market data and present financial commentary, with no hidden code, credential access, persistence, or local system changes.
Before installing, understand that this skill is designed to produce stock commentary and explicit buy/hold/sell suggestions from public market information. Treat outputs as educational analysis, not personalized financial advice, and note that it also includes US-stock examples despite the China-focused description.
The manifest says the skill is for analyzing Chinese stock prices, specifically A-shares and HK stocks. However, the supported markets table includes US tickers such as AAPL, TSLA, and NVDA, expanding the behavior beyond the declared scope.
The prescribed response template is entirely in Chinese and the required disclaimer is also mandated in Chinese, which imposes a specific language on users without opt-in. This is a natural-language policy issue because the skill does not indicate that users may receive analysis in another language or choose their preferred locale.
The manifest says this skill analyzes Chinese stock prices, specifically A-shares and HK stocks, but this file also provides a dedicated 'US Stocks' section with major US tech names and search guidance for US tickers. That expands the apparent subject matter beyond the declared scope and could lead the skill to handle non-Chinese equities not covered by its description.
This markdown file presents nearly all headings, descriptions, and usage tips in Chinese, which effectively forces a specific language/locale for users. The file does not indicate that the language is optional, user-selected, or justified as a region-specific compliance requirement.
No suspicious patterns detected.
