Security audit
Security checks for vulnerabilities and agentic risk
This is a Markdown-only Chinese financial news summarization skill with some overbroad and under-explained optional command examples, but no evidence of hidden, destructive, or exfiltrating behavior.
Install only if you are comfortable with a Chinese-language finance-news helper that may use the agent's shell tool for optional local setup examples. Review any command before running it, especially file-writing examples under ./market-news, and do not rely on its summaries as financial advice or for time-critical trading decisions.
The display name, summary, and the rest of the skill instructions are written in Chinese, but the document does not state that the skill is China-region-specific or that users may choose another language. This can violate language/locale policy expectations when a skill implicitly forces one language without opt-in.
Declaring exec capability for a personal finance news summarization skill grants a much broader execution surface than the documented core need of reading and summarizing market news. Even without explicit malicious commands in the file, unnecessary shell access increases the chance that the agent can be induced to run local commands, inspect environment data, or modify files beyond the user's expectation.
The manifest positions the skill as a free financial news summarization assistant for personal investors, with limits around single-topic summaries and basic interpretation. However, the documentation introduces generic operational capabilities such as create/query/export and modify/reset/import, which imply broader workflow and state-management behavior not aligned with a simple news-summary tool.
The trigger condition is so broad that it could cause the skill to activate in many generic AI, agent, or LLM scenarios unrelated to finance news. Overbroad activation increases the risk of accidental tool invocation and unintended access to capabilities such as file operations or exec in contexts where the user did not clearly request this skill.
The example trigger '帮我搜索今天的财经新闻并总结要点' is somewhat specific, but the document also states users can directly use natural language to trigger the skill without installation, without defining a constrained invocation set. In combination with other generic examples like asking for important news, this leaves activation boundaries underspecified.
The skill states that the free edition does not provide automatic history record saving and is focused on lightweight summarization. Yet it includes instructions to create local preference files and manually persist outputs, extending behavior into local state/configuration management rather than purely ephemeral news assistance.
The markdown instructs users to create a preferences file in a local directory, which is a file-write operation affecting user data on disk. The surrounding documentation does not explicitly warn that this step creates local files or advise users to confirm the target path and contents before running the commands.
The example demonstrates persisting query results to a dated markdown file, which may store potentially sensitive research history on disk. The section does not warn users that running the command will create a file and retain copied output locally.
