Security audit

Financial Analyst Skill

Security checks for vulnerabilities and agentic risk

Overview

This is a financial-analysis skill with risk-aware instructions and no evidence of hidden code, persistence, credential access, or data exfiltration.

Install only if you want a structured financial-analysis prompt/helper. Do not rely on it as personalized financial advice, especially for leverage, concentrated positions, or buy/sell decisions; verify data independently and consult a licensed advisor for consequential decisions.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (6)

Missing User Warnings

Medium

Category: Not specified by scanner
Confidence: 91% confidence
Finding: The README explicitly supports high-risk use cases such as leverage decisions, buy/sell timing, and portfolio adjustment, but only includes a limited legal-style disclaimer and does not prominently warn users about material financial loss risks. In a skill designed to influence investment actions, missing safety guidance can cause users to over-rely on the output for speculative or leveraged decisions without understanding uncertainty, suitability limits, or the need for independent verification.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 95% confidence
Finding: This markdown file contains only Chinese-language examples and headings, and there is no indication that users can opt into another language or that the skill is intentionally limited to a Chinese-speaking or region-specific audience. Under the language/locale policy, forcing a specific language without user choice or documented justification is a natural-language policy concern.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 91% confidence
Finding: The natural-language documentation and API comments are entirely in Chinese, which imposes a specific language/locale on users and maintainers without any visible opt-in or explanation that the skill is region-specific. Under the policy, language constraints should either offer user choice or be clearly justified.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 92% confidence
Finding: The module description and all user-facing reasoning strings are written in Chinese, indicating the skill is designed to operate in a fixed language/locale. Under the policy, forcing a specific language without user opt-in or a clearly documented regional justification is a natural-language policy violation.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 93% confidence
Finding: The natural-language description includes Chinese text ('综合趋势判断、周期定位与风险控制的投资分析技能') alongside English, which imposes a language/localization choice in user-facing metadata without any opt-in or explanation. Under the policy rule for language or locale constraints, this is a natural-language policy concern because users are not given a documented language preference or region-specific justification.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 94% confidence
Finding: This markdown file contains user-facing instructional content exclusively in Chinese, beginning with the title on L001, and nowhere indicates that the skill is region-specific or that users may choose another language. Under the stated policy, forcing a specific language without user opt-in is a natural-language policy violation.
Content: No source excerpt is available for this finding.