A Stock Quantitative Screener

Security checks across malware telemetry and agentic risk

Overview

This instruction-only A-share stock screener is coherent and non-executable, but its stock picks should not be treated as personalized investment advice.

Install only if you want an agent to produce A-share stock-screening research. Treat outputs as informational, verify market data independently, and do not rely on the recommendations as personalized financial advice or guaranteed trading results.

SkillSpector

By NVIDIA

Vulnerability Patterns

Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (2)

Vague Triggers

Medium

Confidence: 92% confidence
Finding: The trigger phrases are broad and overlap with ordinary financial-analysis requests, so the skill may activate unintentionally in contexts where the user did not explicitly ask for this specialized workflow. In a finance skill that produces stock recommendations, accidental invocation increases the chance of unsolicited or overconfident investment guidance being presented as authoritative analysis.

Missing User Warnings

Medium

Confidence: 95% confidence
Finding: The skill provides concrete stock picks, ranking tiers, position sizing, and stop-loss guidance, but it does not include a clear disclaimer that this is not personalized investment advice and that users must make independent judgments. In the context of retail stock selection, this can mislead users into treating the output as professional financial advice, increasing legal, compliance, and user-harm risk if recommendations are unsuitable or wrong.

VirusTotal

66/66 vendors flagged this skill as clean.

View on VirusTotal