Security audit
Security checks for vulnerabilities and agentic risk
This is a disclosed stock-scanning skill with financial-risk caveats but no evidence of hidden code, credential access, persistence, exfiltration, or destructive behavior.
Before installing, understand that this skill presents market signals and sample backtest data but does not include a clear financial-advice disclaimer. Do not rely on its `buy`, `watch`, or `hold` labels alone for investment decisions, and confirm whether any daily automatic backtest behavior creates platform scheduling you can control or disable.
The skill presents scored stock outputs with action labels such as 'hold', 'watch', and 'buy' plus backtest examples, but it does not provide any visible disclaimer that the content is informational only and not financial advice. In a trading context, this can encourage users to act on signals that may affect their finances, increasing the risk of harmful reliance or misinterpretation.
The manifest description and most user-facing documentation are presented in Chinese, while the file title and commands are otherwise mixed-language. This imposes a language constraint on users without explicit opt-in or justification, which fits the policy's language/locale violation criteria.
No suspicious patterns detected.
