Back to skill

Security audit

Michael Burry Investing Skill

Security checks for vulnerabilities and agentic risk

Overview

The skill is a static Michael Burry investing-perspective reference with no executable behavior, but users should treat its market examples cautiously.

Install this only if you want a Burry-style investing lens. Treat all stock, market, short-selling, and portfolio examples as informational and historical/contextual, verify current facts independently, and do not rely on this skill for personalized financial advice or trading decisions.

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (8)

Vague Triggers

Medium
Category
Not specified by scanner
Confidence
92% confidence
Finding

The trigger list contains broad, generic investing terms like 'value investing,' 'margin of safety,' and 'housing market' that are not uniquely tied to this skill. This can cause the agent to invoke the Burry persona in unrelated finance discussions, leading to unintended behavioral steering and lower reliability of responses.

Content

No source excerpt is available for this finding.

Vague Triggers

Medium
Category
Not specified by scanner
Confidence
90% confidence
Finding

The trigger list contains broad phrases such as "value investing," "contrarian investing," "margin of safety," and "short selling" that are common financial discussion terms rather than uniquely identifying this skill. This can cause unintended activation in unrelated investing conversations, leading the agent to inject specialized guidance without clear user intent and increasing the chance of misrouting or inappropriate financial advice.

Content

No source excerpt is available for this finding.

Vague Triggers

Medium
Category
Not specified by scanner
Confidence
97% confidence
Finding

The single-word trigger "Cassandra" is highly ambiguous and overlaps with common personal names, mythology, software products, and other unrelated topics. This makes accidental invocation especially likely, which can cause the skill to activate in contexts having nothing to do with Michael Burry or investing.

Content

No source excerpt is available for this finding.

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

This section presents concrete market theses, named securities, bearish positions, and a paid subscription pitch in a skill intended to shape user decision-making, but it does not include any disclaimer that the material is informational rather than personalized financial advice. In an agent skill context, this increases the chance that users treat speculative commentary as actionable guidance, potentially leading to financial harm or inappropriate reliance on the model for regulated advice-like outputs.

Content

No source excerpt is available for this finding.

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
94% confidence
Finding

This file presents detailed, current-seeming trading decisions, concentrated portfolio allocations, hedging positions, and celebrated outcomes without any disclaimer that the material is educational or historical rather than investment advice. In an agent skill framed as a reusable cognitive operating system, users could reasonably treat these examples as actionable recommendations, increasing the risk of harmful financial decisions.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
95% confidence
Finding

The phrase '二手 analysis' introduces mixed-language content without any indication that multilingual behavior is expected. In practice this can confuse parsing, degrade user comprehension, or produce inconsistent outputs if the agent mirrors or adopts unexpected language in its responses.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
83% confidence
Finding

The manifest sets the language to "en," which indicates an English-only configuration, but there is no accompanying justification that this skill is region-specific or any indication of user opt-in for language preference. Under the policy, forcing a specific language without choice or documented justification can be a natural-language policy issue.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
82% confidence
Finding

Lines L073 and L078 describe events extending into October/November 2025 in a definitive tone, and the document is marked last updated in 2026. This is a natural-language content issue because the file presents asserted factual claims without any indication of uncertainty or user choice, which can violate organizational expectations for accurate, policy-compliant reference material.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.