Security audit
Security checks for vulnerabilities and agentic risk
This skill is a plain Markdown guide for stock analysis, with no code execution, persistence, credential handling, or hidden data access.
Before installing, note that this skill can produce buy/hold/sell-style stock opinions based on web-searched market data, including some US tickers despite the China-focused name. Treat outputs as informational, verify prices and sources independently, and do not rely on it as personalized financial advice.
The instruction mandates a fixed Chinese disclaimer string: "Always include" followed by Chinese text. This imposes a specific language on all users without opt-in or an explicit note that the skill is intended only for Chinese-language interactions, which matches the locale/language policy violation criteria.
The manifest says the skill is for analyzing Chinese stock prices specifically for A-shares and Hong Kong stocks. This reference file adds a full 'US Stocks' section, including both US tech giants and US-listed Chinese companies, which broadens the operational subject matter beyond the declared scope.
The manifest description limits the skill to Chinese stock analysis, specifically A-shares and Hong Kong stocks. However, the supported markets table explicitly includes US tickers such as AAPL, TSLA, and NVDA, expanding the documented behavior beyond the stated scope.
This markdown file mixes English headings with predominantly Chinese section titles, descriptions, and search guidance, effectively constraining comprehension to Chinese readers. The file does not state that it is intentionally region/language-specific or offer an alternative language option, which can violate language/locale policy requirements for user-facing skill content.
No suspicious patterns detected.
