Market Pulse Wingman

Market risk co-pilot for equities. Use when you need to scan a watchlist for technical context, fresh headlines, and operational/security red flags, then log...

What to consider before installing: - The skill itself is coherent for market-headline scanning and logging and asks for no credentials or installs. That part looks benign. - However, the SKILL.md contains hidden unicode control characters (a prompt-injection indicator). These characters can conceal or alter instructions the model will follow. Before installing, inspect the raw SKILL.md for non-printable/control characters (e.g., open in a hex editor, run `cat -v SKILL.md`, or use a tool that shows Unicode code points) and remove them if present. - Because the workflow is open-ended about obtaining headlines, decide and restrict whether the agent is allowed to make live web requests. If you don't want network fetches, restrict the agent or require the user to paste sources. - Do not provide any credentials or API keys to this skill. Test it first with non-sensitive, mock watchlists and verify that all cited headlines and timestamps are real and come from expected public sources. - If possible, ask the publisher for a source/homepage or request a cleaned SKILL.md without hidden characters. If you can't verify the file's origin, treat installation as higher risk. Confidence is medium because the skill is otherwise coherent, but the prompt-injection signal is a notable red flag that requires manual review before trusting autonomous use.