Security audit

沃伦·巴菲特投资逻辑

Security checks for vulnerabilities and agentic risk

Overview

This is a Chinese-language educational Warren Buffett investing reference skill with no executable code, external access, persistence, or hidden system changes.

Install only if you want a Chinese-language reference for Buffett-style value investing. Do not treat its valuation thresholds or investment checklists as personalized financial, tax, or legal advice, and verify current market data independently before acting.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (4)

Missing User Warnings

Medium

Category: Not specified by scanner
Confidence: 94% confidence
Finding: The skill provides concrete investment analysis and decision guidance, including valuation criteria, buy/skip decisions, and portfolio behavior recommendations, but does not disclose that the material is educational and not financial advice. In this context, users could reasonably rely on the output for real financial decisions, increasing the risk of harmful misuse, unsuitable investing, or regulatory/compliance issues.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 98% confidence
Finding: Natural-language policy checks apply to all file types. The skill forces a single language/locale experience through its description and full body content, with no opt-in, alternative language option, or explanation that the skill is intended only for a Chinese-speaking or region-specific context.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 96% confidence
Finding: SQP-3 applies to all file types and includes language or locale policy violations. This markdown file presents all instructions and content exclusively in Chinese, and there is no indication that the skill is region-specific or that users may opt into another language.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 89% confidence
Finding: The entire document is written in Chinese and provides no indication that language selection is optional or that the skill is intentionally restricted to a Chinese-speaking audience. Under the policy rule for natural-language violations, forcing a specific language without user opt-in can be a locale-policy issue.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.