Security audit
Security checks for vulnerabilities and agentic risk
This skill is a focused China stock quote helper that fetches public market data from Sina Finance and does not show hidden or persistent behavior.
Install this if you are comfortable with the agent making outbound requests to Sina Finance for the stock or index codes you ask about. Treat returned prices as informational market data, not financial advice, and avoid entering secrets or unrelated personal data into quote queries.
The skill instructs use of shell via curl but does not declare an explicit tool scope or allowed-tools policy. Even though the current examples are hardcoded to Sina Finance endpoints, missing scope boundaries increases the risk that an agent could invoke shell more broadly than intended if later prompts or modifications introduce user-controlled arguments or additional commands.
The title and substantial portions of the usage/output guidance are written in Chinese, and the skill does not indicate that this language choice is optional or limited to users who prefer Chinese. Under the policy, forcing a specific language without user opt-in can be a natural-language policy violation unless the locale constraint is clearly justified.
No suspicious patterns detected.
