Security audit

A股动作路由

Security checks for vulnerabilities and agentic risk

Overview

This is a Chinese A-share portfolio planning skill that can influence trading decisions, but its behavior is disclosed, scoped, and contains no executable code or hidden system access.

Before installing, understand that this skill may produce actionable A-share portfolio and stock-handling suggestions. Treat outputs as informational planning support, verify market freshness and your own constraints, and do not treat it as professional financial advice.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (3)

Missing User Warnings

Medium

Category: Not specified by scanner
Confidence: 95% confidence
Finding: The skill provides portfolio adjustment guidance, position sizing ideas, and stock-selection logic that could materially influence real trading decisions, yet it does not include an explicit financial-risk or non-advisory disclaimer. In this context, users may reasonably treat the output as actionable investment advice, increasing the chance of financial harm if the analysis is stale, incomplete, or wrong.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 96% confidence
Finding: This markdown template presents all user-facing section labels and workflow prompts in Chinese only, with no indication that other languages are supported or that Chinese is optional. That creates a natural-language policy concern because the skill implicitly constrains users to a specific language without documented opt-in or justification.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 91% confidence
Finding: The natural-language prompt string explicitly instructs use of Chinese output text ("输出留减清加和处理顺序") and does not indicate that the user can choose another language. This creates a locale/language policy concern because the skill appears to enforce a specific language behavior without documented opt-in or justification.
Content: No source excerpt is available for this finding.