Back to skill

Security audit

Industry Research Analyst 行业研究分析师

Security checks for vulnerabilities and agentic risk

Overview

This skill is a coherent industry-research assistant with disclosed public-data lookup behavior and no evidence of hidden access, persistence, or destructive actions.

Install this if you want an agent to produce investment-oriented industry research. Verify financial data and investment conclusions independently, and be aware that using the optional helper script sends ticker symbols to Yahoo Finance for public market data.

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Static analysis

No suspicious patterns detected.