Skills longbridge-portfolio

📦

longbridge-portfolio

Name: longbridge-portfolio
Author: longbridge

v1.0.0 Content revision r3 High Risk ⚙️ External commands

Analyze and Manage Your Longbridge Portfolio

Brokerage data and portfolio decisions are difficult to review across separate screens. This skill retrieves Longbridge account data and provides structured analysis and controlled actions.

Supports: Claude Codex Code(CC)

⚠️ 38 Poor

Stop for confirmation before installing.

Review the plan and obtain explicit user consent before changing files.

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request

Review the Skillstore skill "longbridge-portfolio" from https://skillstore.io/skills/longbridge-longbridge-portfolio.md and its manifest at https://skillstore.io/api/skills/longbridge-longbridge-portfolio/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/longbridge-longbridge-portfolio.md Signed manifest GET /api/skills/longbridge-longbridge-portfolio/manifest Signed lockfile GET /api/skills/longbridge-longbridge-portfolio/lockfile

Test it

Using "longbridge-portfolio". Summarize my Longbridge portfolio.

Expected outcome:

Total assets: 125,400 USD; cash: 18,600 USD.
Largest position: TSLA.US at 24 percent of portfolio value.
Main concern: technology holdings represent 58 percent of invested assets.

Using "longbridge-portfolio". Estimate my portfolio risk over the last year.

Expected outcome:

Historical daily VaR at 95 percent: 2.1 percent.
Maximum drawdown: 18.4 percent.
Results use historical prices and do not predict future losses.

Using "longbridge-portfolio". Create a monthly recurring purchase of 500 USD in AAPL.US.

Expected outcome:

Preview: buy 500 USD of AAPL.US monthly. Please provide the day, start date, and end condition before confirmation.

Security Audit

High Risk

v6 • 8/8/2026 Open versioned report

All 58 static alerts are false positives caused by Markdown formatting or ordinary financial guidance; no Ruby backtick execution, system reconnaissance, or prompt injection was found. The skill still has high-impact capabilities because it can access private brokerage data and execute real-money account changes through the Longbridge CLI or discovered MCP tools.

Files scanned

1,330

Lines analyzed

Review items

False positives ignored

Confirmed security concerns (3)

High

SKILL.md:72-80 references/order.md:13-16 references/dca.md:20-24

Authenticated Brokerage Transactions

The skill can buy, sell, cancel, or replace orders and create recurring purchases. Mistakes or compromised execution can cause direct financial loss.

The cited instructions explicitly authorize account mutations and recurring real-money purchases. Preview and confirmation controls reduce risk but do not remove the capability.

Medium

SKILL.md:60-80 references/assets.md:3-6 references/bank-cards.md:1-4 references/statement.md:3-6

Sensitive Brokerage Data Access

The skill reads balances, holdings, statements, and linked bank-card information from an authenticated brokerage account. Mishandling responses could expose private financial data.

The cited command descriptions explicitly retrieve account assets, statements, and bank cards. Access requires brokerage permissions, confirming the data is account-bound.

Medium

SKILL.md:113-115

Dynamic MCP Tool Discovery

The skill directs the agent to discover MCP tools at runtime when the CLI is unavailable. No explicit server or tool allowlist is defined.

The fallback instruction explicitly requests runtime tool discovery. The surrounding skill includes account reads and financial mutations, increasing the impact of incorrect tool selection.

Risk Factors

⚙️ External commands (47)

references/assets.md:6 references/assets.md:23-30 references/bank-cards.md:18-25 references/cash-flow.md:6 references/cash-flow.md:24-31 references/fund-positions.md:6 references/fund-positions.md:18-25 references/margin-ratio.md:6 references/margin-ratio.md:22-29 references/max-qty.md:6 references/max-qty.md:33-40 references/order.md:39-46 references/portfolio.md:8 references/portfolio.md:26-33 references/positions.md:6 references/positions.md:18-25 references/statement.md:6 references/statement.md:34-41 SKILL.md:26 SKILL.md:58 SKILL.md:60 SKILL.md:61 SKILL.md:62 SKILL.md:63 SKILL.md:64 SKILL.md:65 SKILL.md:66 SKILL.md:67 SKILL.md:68 SKILL.md:69 SKILL.md:70 SKILL.md:71 SKILL.md:72 SKILL.md:73 SKILL.md:77 SKILL.md:78 SKILL.md:79 SKILL.md:80 SKILL.md:109 SKILL.md:110 SKILL.md:111 SKILL.md:121 SKILL.md:122 SKILL.md:123 SKILL.md:124 SKILL.md:125 SKILL.md:129-138

Audited by: codex View Audit History →

Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report

Copy report link

https://skillstore.io/skills/longbridge-longbridge-portfolio/audits/6?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/longbridge-longbridge-portfolio/security.svg)](https://skillstore.io/skills/longbridge-longbridge-portfolio?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/longbridge-longbridge-portfolio?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/longbridge-longbridge-portfolio/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/longbridge-longbridge-portfolio.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Academic citations (APA · BibTeX · CFF)

APA citation

longbridge. (2026). longbridge-portfolio security audit report (audit version 6) [Author version 1.0.0]. Skillstore. https://skillstore.io/skills/longbridge-longbridge-portfolio/audits/6

BibTeX citation

@techreport{longbridge-longbridge-longbridge-portfolio-2026,
  author = {longbridge},
  title = {longbridge-portfolio security audit report (audit version 6)},
  institution = {Skillstore},
  year = {2026},
  number = {6},
  url = {https://skillstore.io/skills/longbridge-longbridge-portfolio/audits/6},
  note = {Author version 1.0.0}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "longbridge-portfolio security audit report (audit version 6)"
version: "1.0.0"
type: report
authors:
  - name: "longbridge"
date-released: "2026-08-08"
url: "https://skillstore.io/skills/longbridge-longbridge-portfolio/audits/6"
identifiers:
  - type: other
    value: "skillstore:longbridge-longbridge-portfolio:audit:6"
    description: "Skillstore immutable audit report identifier"

Skillstore Score

Why this score Evidence Confidence: Medium

Architecture

100

Maintainability

Content

Community

Spec Compliance

What You Can Build

Review Personal Holdings

Inspect positions, cash, gains, concentration, and currency exposure before making portfolio decisions.

Prepare a Risk Review

Measure drawdown, VaR, CVaR, volatility, and scenario losses for a client portfolio.

Control Brokerage Operations

Preview and confirm orders or recurring plans while preserving an explicit record of requested parameters.

Try These Prompts

Show My Portfolio

Show my Longbridge portfolio value, cash, positions, and current profit or loss. Highlight missing data.

Diagnose Portfolio Risk

Analyze my Longbridge holdings for concentration, sectors, currencies, factor exposure, and highly correlated positions. Explain the main risks clearly.

Build a Rebalancing Plan

Compare my current portfolio with these target weights: [targets]. Propose trades, costs, taxes, and drift thresholds without executing anything.

Review and Place an Order

Prepare a preview to [buy or sell] [symbol], [quantity], using [order type and price]. Wait for my explicit confirmation before execution.

Best Practices

Confirm the account, currency, symbol, quantity, price, schedule, and end condition before any mutation.
Use the smallest required Longbridge permission and expose only data needed for the current request.
Treat calculations as estimates and state assumptions, data gaps, dates, and source information.

Avoid

Do not execute an order or recurring-plan change from an ambiguous acknowledgement.
Do not invent missing transaction parameters, market data, cost basis, or account values.
Do not share raw account responses, statement identifiers, or bank details beyond the requested task.

Frequently Asked Questions

Which Longbridge permissions are required?

Public margin tools need no login. Portfolio data needs Quote permission, while positions, statements, orders, and recurring plans need Trade permission.

Can this skill place real orders?

Yes. It can submit, cancel, or replace orders after showing a preview and receiving explicit confirmation.

Can it manage recurring investments?

Yes. It can list, create, update, pause, resume, or stop plans after confirming every required parameter.

Does it provide investment advice?

It provides structured analysis for reference. Its outputs do not replace licensed investment, legal, or tax advice.

What happens when data is missing?

The skill reports the gap, asks for required details, and avoids calculations or transactions that depend on unknown values.

Does it support languages other than English?

Yes. It can respond in English, Simplified Chinese, or Traditional Chinese based on the user's natural-language input.