Security audit

xqant daily market report

Security checks for vulnerabilities and agentic risk

Overview

This is a mostly coherent market-report skill, but it asks the agent to use unscoped external memory and non-packaged reference files for financial analysis.

Review this skill before installing. It appears to be a Markdown-only market report helper, but you should only use it in an environment where `MEMORY.md` and the referenced `STANDARD/` files are intended inputs for this report and do not contain unrelated private information or instructions. Treat generated forecasts as informational, not investment advice.

A.I.G

Vulnerability Patterns

Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally

Findings (1)

T05 · Unauthorized Access and Privilege Escalation

Warning

Location: SKILL.md:69
Finding: Unnecessary Access to External Agent Memory
Content: View full analysis
Remediation: View remediation

SkillSpector

Vulnerability Patterns

Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (2)

Vague Triggers

Medium

Category: Not specified by scanner
Confidence: 95% confidence
Finding: The trigger phrases are broad natural-language requests such as '今日市场总结' and '固收 + 赛道预测', which could match ordinary user conversation and cause the skill to activate unintentionally. In a finance-focused skill, accidental invocation is more concerning because it may produce unsolicited market commentary or predictions that users could mistake for deliberate analysis.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 84% confidence
Finding: 文档标题及整体说明均以中文定义技能行为，且未说明是否支持其他语言或由用户选择输出语言。按规则，若技能强制特定语言而无用户 opt-in，可能构成语言/地区策略方面的自然语言合规问题。
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.