Security audit
Security checks for vulnerabilities and agentic risk
The skill is a coherent gold/silver HTML report generator, but it needs review because generated reports can embed untrusted HTML/JavaScript and load a remote chart script.
Install only if you are comfortable with a Chinese-market report workflow that writes local HTML files. Review or harden the renderer before using untrusted JSON, auto-ingesting external text, emailing reports, or hosting them on an authenticated site; prefer escaping plain text, generating structured HTML/JS internally, and vendoring or integrity-pinning ECharts.
scripts/generate_report.py:58Stored HTML and JavaScript Injection Through Unescaped Template Substitution
结论：{{CONCLUSION_TEXT}}
{{DISCLAIMER}}
| 品种 | 最新价 (USD/oz) | 折合 (元/克) | 涨跌幅 | 昨收 (USD/oz) | 日内高 | 日内低 | 盘面 |
|---|
assets/report_template.html:7Third-Party JavaScript Loaded Without Subresource Integrity
The README presents the skill entirely as a Chinese-language reporting tool and frames the generated artifact as a fixed-format Chinese report. There is no indication that users may opt into another language or locale, which matches the policy category for language/locale constraints without user choice.
The skill explicitly instructs the agent to write an output file (黄金白银日报-YYYY-MM-DD.html) but does not declare any tool scope or allowed-tools restrictions. That mismatch can lead to overbroad file-write behavior, making it easier for an agent runtime to write files in unintended locations or with unintended names if the surrounding platform defaults are permissive.
The manifest description specifies generating a Chinese daily report using Chinese phrases and output conventions, but does not indicate that the language is optional or based on user preference. This is a natural-language policy concern because it appears to impose a specific language/locale by default rather than offering a choice.
The HTML template explicitly sets lang="zh-CN" and uses a Chinese-only report title and section labels, which indicates the skill output is fixed to a specific language/locale. Under the policy, locale constraints should either be optional for the user or clearly documented as justified for a region-specific use case.
The template imports ECharts from a public CDN at render time, which creates a supply-chain and integrity risk: anyone able to tamper with the CDN response, exploit a compromised dependency release, or intercept traffic in a weak environment could execute arbitrary JavaScript in the generated report. Because this skill's purpose is only to generate a static daily market report, pulling third-party executable code from the network is not strictly necessary and increases attack surface beyond the stated scope.
This JSON file embeds user-facing natural-language content entirely in Chinese, including date formatting and narrative text, with no indication that language selection is optional. The policy requires flagging language or locale constraints when the skill forces a specific language without user opt-in or clear justification.
The title and the rest of the template are written as fixed Chinese output requirements, and no language choice or opt-in is provided. Under the policy, forcing a specific language without user choice is a natural-language policy violation unless the locale restriction is explicitly justified.
This Python file contains natural-language documentation, CLI descriptions, warnings, and status output entirely in Chinese, indicating the skill is designed to operate in a fixed language/locale. Under the policy, forcing a specific language without user opt-in is a natural-language policy violation unless the locale restriction is clearly documented and justified, which is not present here.
Dynamic import() can load arbitrary modules at runtime, bypassing static analysis and potentially importing malicious code.
if missing:
uniq = sorted(set(missing))
print("警告: 以下占位符未在数据中提供，已保留原样: " + ", ".join(uniq), file=__import__('sys').stderr)
with open(args.out, 'w', encoding='utf-8') as f:
f.write(html)
This code file contains natural-language documentation and CLI output entirely in Chinese, including the module docstring and help text, with no indication that the user can choose another language. Under the stated policy, forcing a specific language without user opt-in is a locale-policy issue unless clearly justified as region-specific.
No suspicious patterns detected.