Security audit
TickHub
Security checks for vulnerabilities and agentic risk
Overview
This instruction-only stock quote skill is narrowly scoped to looking up public market data and does not request credentials, persistence, or local file access.
Safe to use for simple stock price lookups. Treat it as a third-party market-data lookup: do not provide brokerage credentials, private portfolio details, or trading instructions, and be aware that ticker symbols or company names may be sent to the endpoint shown in the skill.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.