Back to skill

Security audit

test

Security checks for vulnerabilities and agentic risk

Overview

This skill is a disclosed stock-research workflow that uses market data and web search to produce investment analysis, with no executable code or persistence.

Before installing, consider that this skill can produce investment ratings and trading suggestions based on external data and web search; treat its output as research assistance rather than financial advice, and verify important facts independently.

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Static analysis

No suspicious patterns detected.