Security audit
constitution-md-trading-intelligence-v-1
Security checks across malware telemetry and agentic risk
Overview
This is a text-only trading-analysis skill with conservative manual-trade guidance and no evidence of code execution, credential access, or automatic trading.
Install only if you want an agent to provide trading-analysis guidance. Treat outputs as informational, verify live market and news data independently, and do not connect it to broker accounts, WhatsApp automation, or paid data sources unless you separately review and approve those permissions.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
VirusTotal findings are pending for this skill version.
Static analysis
No suspicious patterns detected.