Back to skill

Security audit

A股全市场扫描

Security checks for vulnerabilities and agentic risk

Overview

This skill is a disclosed Chinese A-share market analysis workflow with no code execution, persistence, credential use, or hidden data handling, but users should treat its trading output as informational.

Install only if you want a Chinese-language A-share market scanning assistant. Its market and trading-framework outputs may be time-sensitive and should not be treated as personalized financial advice or an instruction to trade without independent verification.

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (4)

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
88% confidence
Finding

The description and all operating instructions are written as if the skill will function in Chinese by default, with no indication that users may choose another language. Under the policy, forcing a specific language without user opt-in can be a natural-language policy violation unless the locale constraint is explicitly documented and justified.

Content

No source excerpt is available for this finding.

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

The skill explicitly steers users toward trading and portfolio-adjustment decisions, including what to do today, what to avoid, and which follow-on skill to use, but it provides no clear disclaimer that the output is informational rather than financial advice. In the context of time-sensitive A-share market analysis, users may reasonably rely on the output for real trading decisions, increasing the chance of financial harm from inaccurate, stale, or overly confident recommendations.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
94% confidence
Finding

The file content is entirely in Chinese and provides no indication that users may choose another language or locale. This creates a natural-language policy concern because the skill effectively requires a specific language without documenting an opt-in or justified regional scope.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
80% confidence
Finding

The natural-language instruction in the default prompt is partly hard-coded in Chinese, which can impose a language/locale expectation on users without opt-in. The file does not indicate that the skill is intentionally limited to Chinese-language or A-share-specific users as a documented locale constraint.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.