Super Trend Analysis

• Outcome: Pass
• Latest audit: May 29, 2026 at 8:19 PM UTC
• Version:
  1.0.1

Overview

This skill locally analyzes user-selected stock CSV files and writes reports, with only minor documentation gaps around chart output and generated CSV files.

Install only if you are comfortable running local Python scripts on stock CSV files and saving generated reports/indicator CSVs. Use a virtual environment, point batch mode only at intended folders, and treat the trading suggestions as informational analysis rather than financial advice.

SkillSpector

By NVIDIA

Vulnerability Patterns

• MCP Tool Poisoning: Hidden Instructions, Unicode Deception, Parameter Description Injection
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Tp4

High

• Category: MCP Tool Poisoning
• Confidence: 88% confidence
• Finding: The documented behavior does not match the reported implementation: it allegedly supports broader batch directory scanning, exports additional CSV artifacts, and does not actually generate promised charts. This mismatch can mislead users and operators about what the skill will access and produce, which is dangerous because hidden scope expansion increases the chance of unintended data exposure or overbroad filesystem processing.

VirusTotal

66/66 vendors flagged this skill as clean.