Security audit
Security checks for vulnerabilities and agentic risk
This is a small markdown-only stock analysis helper with no executable code or persistence, though its market scope and language defaults should be clearer.
Install this only if you want a prompt-style assistant for public stock analysis, mostly in Chinese. Verify market data and any buy/sell recommendation yourself, and ask for an English or bilingual disclaimer if you are not comfortable reading Chinese financial risk notices.
The trigger description is broad enough that the skill may activate for generic stock-analysis requests without clear scoping to Chinese equities. Over-broad activation can cause the wrong skill to intercept queries, leading to unintended behavior, misleading recommendations, or bypass of more appropriate domain-specific handling.
The manifest description limits the skill to analyzing Chinese stock prices, specifically A-shares and Hong Kong stocks. However, the supported markets table includes US tickers such as AAPL, TSLA, and NVDA, expanding behavior beyond the declared scope.
The prescribed output format is Chinese-language only, regardless of the user's language. This can override user intent and degrade transparency or comprehension, especially for users expecting English output, creating a prompt-quality and trust issue that may materially affect interpretation of financial information.
The mandatory disclaimer is only provided in Chinese, which may not be understood by non-Chinese-speaking users. In a financial-analysis context, failing to communicate limitations and risk clearly can reduce informed use of the output, though the issue is primarily one of user safety and clarity rather than direct system compromise.
This markdown file contains operational content and search guidance primarily in Chinese, while also mixing in English headings such as 'Hong Kong Stocks' and 'US Stocks'. Because there is no note that the skill is intended specifically for Chinese-speaking users or any option to use another language, it can be interpreted as forcing a locale/language choice without opt-in.
The manifest description limits the skill to Chinese stock analysis for A-shares and Hong Kong stocks. This reference file expands the scope to general US stocks such as Apple, Microsoft, Amazon, Meta, NVIDIA, and Tesla, which does not match that stated scope.
No suspicious patterns detected.
