ClawHub
Back to skill

Security audit

CN Stock Analyst 股票智能分析师

Security checks for vulnerabilities and agentic risk

Overview

This is a disclosed Chinese stock-analysis skill that fetches public market data and generates reports, with no hidden code, persistence, or credential handling found.

Install only if you want a Chinese-language stock-analysis assistant. Be aware it may fetch public market data from third-party finance sites and it produces ratings, target prices, and operation suggestions that should not be treated as personalized financial advice.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (3)

Vague Triggers

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

The activation description includes broad everyday phrases such as '帮我分析XX', '看一下XX股', and generic finance/technical-analysis keywords, which can cause the skill to trigger when the user did not explicitly ask to invoke a stock-analysis workflow. In an agent setting, over-broad routing can lead to unintended web fetching, unwanted financial guidance generation, and context hijacking into a regulated/high-risk domain.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

The entire report template is written in Chinese and presents a fixed-language output format, with no indication that users can choose another language or opt into this locale. Under the policy criteria, forcing a specific language without user choice is a natural-language policy violation unless clearly justified as region-specific.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
91% confidence
Finding

L171-L172 要求按模板生成报告且“语言简洁专业”，结合全文均以中文规定行为，技能未向用户提供语言/locale 选择。对于支持美股等跨地区标的的分析助手，默认固定中文输出属于语言策略约束，但未见用户可选择或显式 opt-in。

Content

No source excerpt is available for this finding.