Portfolio Risk Manager

• Outcome: Pass
• Latest audit: May 28, 2026 at 8:22 AM UTC
• Version:
  1.0.2

Overview

This is a bounded portfolio-planning skill with no executable code or broker access, though users should treat its investment guidance as planning support only.

Install only if you want a planning assistant for Vietnam equity portfolio discipline. Invoke it explicitly for investment-planning tasks when possible, verify any default cash-flow or holdings assumptions, and do not treat target weights or triggers as financial advice or broker orders.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

• Confidence: 90% confidence
• Finding: This manifest enables implicit invocation but does not define any narrow trigger phrases, exclusions, or context limits. That makes it unclear when the skill should activate versus remain inactive, increasing the risk of unintended invocation.

VirusTotal

65/65 vendors flagged this skill as clean.