Security audit
Market News Aggregator
Security checks across malware telemetry and agentic risk
Overview
This skill is a disclosed market-news workflow that fetches public financial news pages and summarizes them without hidden code or persistence.
Before installing, understand that the skill will direct an agent to fetch public financial-news websites and summarize market-moving items. It does not request credentials or persistent access, but users should treat the output as news analysis rather than investment advice and avoid excessive automated fetching.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
62/62 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.