A股估值审阅助手

• Outcome: Pass
• Latest audit: May 28, 2026, 9:53 AM
• Version:
  1.0.0

Overview

This is a text-only A-share valuation review skill with a coherent financial-review purpose and no hidden code, persistence, or data movement.

Install this if you want a specialized A-share/PRC valuation-review assistant. Confirm the transaction type, company, exchange, and jurisdiction are in scope before relying on its thresholds or compliance framing, and avoid providing confidential valuation reports unless your agent environment is approved for that data.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

• Confidence: 91% confidence
• Finding: The trigger phrases include broad conversational language such as “估值有没有问题” and “帮我看看这个估值,” which can match ordinary discussion and cause the skill to activate when the user did not explicitly request this specialized reviewer. Unintended invocation can redirect user requests into a finance-review workflow, increasing the chance of irrelevant processing, disclosure of sensitive financial materials, or bypass of more appropriate skills.

VirusTotal

64/64 vendors flagged this skill as clean.