Security audit
Mars Stock Analysis
Security checks for vulnerabilities and agentic risk
Overview
This is a non-executable stock research skill with scoped public financial-data use and no evidence of credential handling, persistence, or unsafe automation.
Reasonable to install as a research aid. Verify the publisher/version because metadata is inconsistent, and avoid sharing private portfolio or account details unless you intend the agent to use that context. Treat generated ratings as educational analysis, not financial advice.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.