Yahoo Finance FOREX

Security checks across malware telemetry and agentic risk

Overview

This skill is a disclosed Yahoo Finance FOREX data helper, but users should treat its BUY/SELL/HOLD output as informational rather than financial advice.

Install only if you are comfortable with a Python script using the external yfinance package and making network requests for Yahoo Finance market data. Treat BUY/SELL/HOLD outputs as educational sentiment labels, not financial advice, and verify with independent research before trading.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (2)

Missing User Warnings

Medium
Confidence
91% confidence
Finding
This file provides concrete trading guidance and risk-management advice but does not include any warning that FOREX trading can result in significant financial loss and that the content is informational rather than financial advice. In a skill explicitly designed to provide market data, sentiment, and trading context, omission of a financial-risk disclaimer can encourage overreliance by users and increase the chance of harmful decisions.

Missing User Warnings

Medium
Confidence
95% confidence
Finding
The guide gives concrete trading recommendations such as BUY, HOLD, and SELL without an explicit disclaimer that the content is not financial advice and that trading can result in substantial losses. In a skill focused on FOREX analysis, users may reasonably treat these outputs as actionable investment guidance, increasing the risk of harmful financial decisions.

VirusTotal

61/61 vendors flagged this skill as clean.

View on VirusTotal