Security audit

基于 Brent Penfold《交易圣经》框架，为股票交易生成完整的交易预案（Setup）和交易计划（Plan）。当用户询问「帮我制定交易计划」、「帮我做交易预案」、「XX股票怎么买」、「帮我规划一下XX股票的入场和止损」时使用此技能。触发前提：用户明确指定了具体股票代码或名称

Security checks for vulnerabilities and agentic risk

Overview

The skill is transparent and non-persistent, but it gives specific stock trading instructions without enough financial-risk and advice boundaries.

Review this skill carefully before installing if you may use it for real trades. It can produce concrete buy, sell, stop-loss, target-price, and position-size guidance, but it does not clearly state that outputs are not personalized financial advice or require suitability inputs before making recommendations.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (6)

Missing User Warnings

Medium

Category: Not specified by scanner
Confidence: 97% confidence
Finding: The skill is explicitly designed to generate actionable trading plans, including entry prices, stop-losses, target prices, and position sizing, yet it provides no disclaimer that the output is informational only and not personalized financial advice. This can cause users to treat the model's output as authoritative investment advice, increasing the risk of unsuitable or harmful financial decisions and creating compliance, trust, and user-safety issues.
Content: No source excerpt is available for this finding.

Missing User Warnings

Medium

Category: Not specified by scanner
Confidence: 95% confidence
Finding: This document provides concrete trading methodology and action-oriented guidance without any warning that it is not financial advice and that following it may lead to monetary loss. In the context of a skill explicitly designed to generate stock trading plans for named securities, users may reasonably rely on the output for real financial decisions, increasing the chance of harmful overreliance.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 84% confidence
Finding: The manifest description and invocation examples are entirely in Chinese and instruct use through Chinese-language phrases, which can amount to an implicit language policy constraint. Because the file does not offer user language choice or explain that the skill is intentionally region/language-specific, this may violate the language/locale policy rule.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 94% confidence
Finding: The manifest description is written only in Chinese, which indicates a language-specific presentation without any indication that users can choose another language or locale. Under the policy rules, forcing a specific language without opt-in is a natural-language policy concern.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 93% confidence
Finding: This markdown file contains user-facing instructional content exclusively in Chinese, and there is no indication that the skill is region-specific or that users can opt into another language. Under the policy, forcing a specific language without user choice can be a natural-language policy violation.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 84% confidence
Finding: SQP-3 applies to all file types and includes language or locale policy violations. This file presents all operational guidance only in Chinese and does not indicate user opt-in, alternative language support, or a justified region-specific constraint.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.