CtrlK
BlogDocsLog inGet started
Tessl Logo

a-stock-prediction

A股个股次日(T+1)走势预测 skill。当用户输入A股股票代码(如 600519、000858、300750、688981、430090)或公司名称(如"贵州茅台"、"宁德时代"、"比亚迪"),并要求预测次日走势、给出交易计划、评估盈亏概率时,触发本 skill。skill 会用 mcp__MiniMax__web_search 搜证大盘环境、龙虎榜、北向资金、融资融券、主力资金流、板块联动、公告与消息面等,按"四维分析框架"(大盘环境 30% / 资金行为 30% / 技术面 25% / 消息面 15%)交叉验证,产出可量化的方向预测(看多/看空/震荡 + 概率百分比 + 价格区间),并写入当前项目 markdown 目录下的 `a-stock-{代码}-{YYYY-MM-DD}.md`。输出包含详细逻辑推导链、中间结果与最终结果概率、专业术语小白解释、mermaid/ascii/svg 图表。适用场景:盘后复盘想做次日的方向判断与交易计划;不适用:长线基本面估值(改用 finance-core-analysis)、日内高频交易、港股/美股(改用 us-stock-prediction)。

77

Quality

96%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

SecuritybySnyk

Low

Low-risk findings worth noting

SKILL.md
Quality
Evals
Security

Low

Low-risk findings.

1 low severity finding. Worth noting, but not necessarily harmful.

Low

W011: Third-party content exposure detected (indirect prompt injection risk).

What this means

The skill exposes the agent to untrusted, user-generated content from public third-party sources, creating a risk of indirect prompt injection. This includes browsing arbitrary URLs, reading social media posts or forum comments, and analyzing content from unknown websites.

Why it was flagged

该技能在“步骤2: 信息搜证”中调用 `mcp__MiniMax__web_search` 在运行时抓取外部网页/数据源的正文(如财经网站、公告页面、龙虎榜等),这些结果会以可读文本形式进入 LLM 上下文,从而存在外部作者/站点内容导致的间接提示注入风险。

Report incorrect finding
Repository
digoal/blog
Audited
Security analysis
Snyk

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.