Security audit
Market Open Watch
Security checks for vulnerabilities and agentic risk
Overview
This skill is a low-risk market-news briefing helper that uses public web search and does not request sensitive local access or persistent privileges.
Reasonable to install if you want public pre-market news summaries. Treat outputs as time-sensitive research, verify dates and sources before relying on them for trading decisions, and note that the script appears more like a wrapper/placeholder than a full data-fetching implementation.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.