Security audit
Ths Stock Themes
Security checks for vulnerabilities and agentic risk
Overview
This skill is a straightforward public stock-data lookup helper with disclosed browser access to stock websites and no hidden privileged behavior found.
Reasonable to install for public stock theme and popularity lookups. Be aware that stock codes and ranking requests may be sent to Tonghuashun/Iwencai pages, and treat returned market data as informational rather than financial advice.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.