赵克常老师SKILL

• Outcome: Pass
• Latest audit: May 29, 2026 at 8:34 PM UTC
• Version:
  1.0.0

Overview

This is a text-only investment analysis framework with no code execution, credentials, persistence, or hidden data handling, though users should treat its financial outputs as educational rather than advice.

Install only if you want an educational investment research framework. Verify market data independently, do not provide brokerage credentials, and make any trading decisions yourself or with a qualified financial professional.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

• Confidence: 91% confidence
• Finding: The skill's trigger description is very broad, covering many common investing tasks such as stock analysis, portfolio review, industry assessment, macro analysis, and trading support. In an agent system, this can cause over-triggering and unintended routing, leading users to receive speculative financial guidance in contexts where a narrower or more appropriate skill should apply.

VirusTotal

63/63 vendors flagged this skill as clean.