Three Line Dragon Stock

• Outcome: Pass
• Latest audit: May 29, 2026 at 8:41 PM UTC
• Version:
  1.0.0

Overview

This skill is a stock trading plan helper that gives actionable trade-planning guidance, but it does not show hidden access, trade execution, persistence, or data exfiltration behavior.

Install only if you want a tool that helps draft stock trading plans. Treat its outputs as research prompts, not personalized financial advice; verify all market data independently, understand that trades can lose money, and do not place orders unless you personally confirm the plan fits your risk tolerance and account constraints.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

Missing User Warnings

Medium

• Confidence: 92% confidence
• Finding: The skill gives concrete stock-selection and buy-execution guidance, including entry signals, position sizing, and stop-loss rules, but does not provide a clear warning that this is not financial advice and that trading can cause substantial losses. In an agent setting, users may over-rely on the recommendations as authoritative instructions, increasing the risk of harmful financial decisions.

VirusTotal

64/64 vendors flagged this skill as clean.