The Agent Skills Directory

[METADATA_POISONING]: The skill's frontmatter in SKILL.md claims that child_process usage is false, but the implementation in scripts/cli.mjs and scripts/update-check.mjs relies heavily on spawning child processes for background updates and system checks.
[PERSISTENCE]: The skill implements a background update check in scripts/cli.mjs that triggers after successful tool calls. It spawns a detached process (scripts/update-check.mjs) that runs independently of the main agent session to maintain and update the skill's files daily.
[COMMAND_EXECUTION]: The skill executes shell commands via node:child_process. scripts/cli.mjs spawns background update tasks, and scripts/update-check.mjs executes git, npx skills update, and npx skills add to modify the local environment.
[DYNAMIC_EXECUTION]: The update mechanism in scripts/cli.mjs copies the update script to a temporary cache directory (e.g., ~/.cache/wind-aifinmarket/) and executes it dynamically to avoid conflicts during the self-update process.
[REMOTE_CODE_EXECUTION]: The skill is configured to automatically pull and install code updates from remote repositories (GitHub and Gitee) using the npx skills update command. While these target vendor-owned repositories, this mechanism allows for remote modification of the skill's executable logic.
[INDIRECT_PROMPT_INJECTION]: The skill processes external financial data, news, and research reports which could contain adversarial instructions.
Ingestion points: Financial data and documents retrieved from https://mcp.wind.com.cn via various MCP tools.
Boundary markers: The SKILL.md file contains instructions for the agent to only base its answers on the returned tool results and avoid using internal knowledge.
Capability inventory: The skill has the ability to read and write to the file system (for configuration and updates), make network requests, and spawn background processes.
Sanitization: scripts/cli.mjs performs parameter validation (types, enums, and required fields) against a local registry schema before executing tool calls.

wind-mcp-research-skill