CtrlK
BlogDocsLog inGet started
Tessl Logo

us-stock-prediction

美股个股次日走势预测 skill。当用户输入美股股票代码(如 AAPL、TSLA)或公司名称(如 "苹果"、"特斯拉"),并要求预测次日(T+1)走势、给出交易计划、评估盈亏概率时,触发本 skill。skill 会用 mcp__MiniMax__web_search 搜证盘前 90 分钟的关键信息(财报、盘后走势、隔夜期货、期权异动、内部人交易、宏观日历等),按"五维分析框架"(基本面/技术面/资金面/情绪面/宏观面)交叉验证,产出可量化的方向预测(涨/跌/横盘 + 概率百分比 + 区间),并写入当前项目 markdown 目录下的 `us-stock-{TICKER}-{YYYY-MM-DD}.md`。输出必须有完整的逻辑推导链(每一维的打分过程与数据来源)、术语通俗解释、mermaid/ascii 流程图或可视化图表。适用场景:盘前/盘中想做次日的方向判断与交易计划;不适用:长线基本面估值(应改用 finance 领域其他 skill)、日内高频交易、加密货币/港股/A股。

75

Quality

92%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

SecuritybySnyk

Low

Low-risk findings worth noting

SKILL.md
Quality
Evals
Security

Low

Low-risk findings.

1 low severity finding. Worth noting, but not necessarily harmful.

Low

W011: Third-party content exposure detected (indirect prompt injection risk).

What this means

The skill exposes the agent to untrusted, user-generated content from public third-party sources, creating a risk of indirect prompt injection. This includes browsing arbitrary URLs, reading social media posts or forum comments, and analyzing content from unknown websites.

Why it was flagged

步骤 2 “信息搜证”要求在运行时调用 `mcp__MiniMax__web_search` 抓取网页/消息源并将其结果用于五维打分与撰写报告,因此会把“公开网页/第三方媒体等外部作者的可读自由文本”读入到代理的LLM上下文中(典型间接提示注入来源)。

Report incorrect finding
Repository
digoal/blog
Audited
Security analysis
Snyk

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.