Yahoo Finance FOREX

Security checks across malware telemetry and agentic risk

Overview

This skill is a disclosed Yahoo Finance FOREX data helper, but users should treat its BUY/SELL/HOLD output as informational rather than financial advice.

Install only if you are comfortable with a Python script using the external yfinance package and making network requests for Yahoo Finance market data. Treat BUY/SELL/HOLD outputs as educational sentiment labels, not financial advice, and verify with independent research before trading.

SkillSpector

By NVIDIA

Vulnerability Patterns

Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (2)

Missing User Warnings

Medium

Confidence: 91% confidence
Finding: This file provides concrete trading guidance and risk-management advice but does not include any warning that FOREX trading can result in significant financial loss and that the content is informational rather than financial advice. In a skill explicitly designed to provide market data, sentiment, and trading context, omission of a financial-risk disclaimer can encourage overreliance by users and increase the chance of harmful decisions.

Missing User Warnings

Medium

Confidence: 95% confidence
Finding: The guide gives concrete trading recommendations such as BUY, HOLD, and SELL without an explicit disclaimer that the content is not financial advice and that trading can result in substantial losses. In a skill focused on FOREX analysis, users may reasonably treat these outputs as actionable investment guidance, increasing the risk of harmful financial decisions.

VirusTotal

61/61 vendors flagged this skill as clean.

View on VirusTotal