Security audit

yanyun1988 雪球整理

Security checks for vulnerabilities and agentic risk

Overview

This markdown-only skill does not execute code, but it can steer users toward concrete trading actions using speculative or stale stock commentary without a consistent financial-risk disclaimer.

Review this carefully before installing if you may rely on it for investment decisions. Treat its stock commentary as historical opinion, not personalized financial advice; verify dates, prices, filings, rumors, and your own risk tolerance before acting.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (16)

Missing User Warnings

Medium

Category: Not specified by scanner
Confidence: 97% confidence
Finding: The skill is explicitly designed to produce stock analysis, position commentary, timing suggestions, and portfolio-style guidance, yet it lacks a prominent user-facing disclaimer that the output is not financial advice and may be speculative or inaccurate. In context, this is more dangerous because the content uses authoritative tone, concrete tickers, target horizons, and action-oriented language that could materially influence real trading behavior, especially for retail users.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 98% confidence
Finding: The entire markdown file is written in Chinese and provides no indication that language selection is optional or that the skill is intentionally limited to a Chinese-language audience. Under the stated policy, forcing a specific language without user opt-in is a natural-language policy concern.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 95% confidence
Finding: SQP-3 applies to all file types and covers language or locale policy violations. This markdown file presents all instructions and content only in Chinese, with no opt-in, alternative language, or statement that the skill is intended exclusively for a Chinese-language audience.
Content: No source excerpt is available for this finding.

Missing User Warnings

Medium

Category: Not specified by scanner
Confidence: 95% confidence
Finding: The article provides explicit trading actions such as 'add position,' 'hold,' and 'liquidate' that are conditioned on unverified market rumors and speculative asset-injection expectations. Although the document notes the rumor is unconfirmed and even describes the thesis as having a gambling component, those caveats are outweighed by concrete operational guidance in a skill specifically designed to help users analyze stocks using this author's views.
Content: No source excerpt is available for this finding.

Missing User Warnings

Medium

Category: Not specified by scanner
Confidence: 96% confidence
Finding: The file gives concrete investment guidance such as '做成长股，要忽略波动' and sector-selection advice without any risk disclosure or suitability caveat. In a skill explicitly meant to analyze stocks using a named influencer's views, this can cause users to treat speculative opinions as actionable financial advice and make harmful decisions.
Content: No source excerpt is available for this finding.

Missing User Warnings

Medium

Category: Not specified by scanner
Confidence: 98% confidence
Finding: This section includes aggressive timing and sizing advice: converting remaining cash to stocks, '打满', and buying earlier intraday if prices fall more. That is materially more dangerous than general commentary because it encourages concentrated exposure and rapid action without any warning about volatility, losses, or user suitability.
Content: No source excerpt is available for this finding.

Missing User Warnings

Medium

Category: Not specified by scanner
Confidence: 95% confidence
Finding: The content explicitly promotes '逢跌加仓' and labels June as the best time to accumulate a speculative theme, which normalizes buy-the-dip behavior without discussing downside scenarios. In this skill context, that can nudge users toward repeated averaging down in volatile assets based solely on an influencer's conviction.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 90% confidence
Finding: The manifest description and the entire instruction set are written to operate in Chinese and describe a Chinese-language analysis style, but there is no indication that users may opt into another language. Under the stated policy, a fixed language behavior without user choice or clear justification is a natural-language policy concern.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 91% confidence
Finding: This markdown file contains natural-language instructions and guidance exclusively in Chinese, with no indication that the skill is intended only for a Chinese-speaking or China-specific audience. Under the language/locale policy check, forcing a single language without user opt-in can be a policy violation.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 87% confidence
Finding: The entire skill content is written only in Chinese and does not indicate any user language choice or opt-in. Under the stated policy, forcing a specific language without user opt-in is a natural-language locale policy concern.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 90% confidence
Finding: SQP-3 applies to all file types and includes language or locale policy violations in natural-language content. This markdown file presents the skill/article content only in Chinese and does not indicate user opt-in, alternative language options, or a documented region-specific justification.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 92% confidence
Finding: This file contains user-facing natural language content exclusively in Chinese, and there is no indication that the skill is region-specific or that users can opt into this language. Under the policy, forcing a specific language without user choice can be a locale-policy violation.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 85% confidence
Finding: This article presents all user-facing natural-language content exclusively in Chinese and does not indicate any user opt-in or alternative language support. Under the policy for natural-language violations, forcing a specific language without user choice can be a locale-policy issue.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 88% confidence
Finding: This markdown file contains user-facing natural-language content exclusively in Chinese, and there is no indication that the skill offers users a language/locale choice. Under the policy rule for natural-language violations, forcing a specific language without opt-in can be a locale-policy issue unless the regional constraint is explicitly documented and justified.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 88% confidence
Finding: The document presents all user-facing content in a single language and does not mention any option for alternative languages or a reason the skill must be Chinese-only. Under the stated policy, forcing a specific language without user opt-in can be a natural-language policy violation.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 93% confidence
Finding: The entire document is written in Chinese and does not offer any language or locale choice or indicate that the language restriction is optional. Under the policy for natural-language content, forcing a single language without user opt-in can be a locale-policy violation unless clearly justified.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.