Back to skill

Security audit

China Technical Analysis

Security checks for vulnerabilities and agentic risk

Overview

This skill is a disclosed technical-analysis helper for Chinese futures data and does not show hidden access, persistence, or credential handling.

Before installing, understand that the skill may query external Sina Finance endpoints for market data and may produce trading signals. Use those signals as technical-analysis context only, and verify market data and risk independently before making financial decisions.

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Static analysis

No suspicious patterns detected.