Security audit
Security checks for vulnerabilities and agentic risk
This skill is a disclosed persona-file generator with web search and workspace file output that fit its stated purpose.
Install only if you want a Chinese-language SOUL.md persona generator. Before running it, confirm the intended persona name, review the generated file path, and avoid letting broad trigger phrases create or overwrite persona files unexpectedly.
The trigger phrases include extremely generic terms such as “生成”, “我是”, and “SOUL.md”, which are likely to appear in ordinary user conversations unrelated to this skill. In an agent environment, this can cause unintended invocation, leading the skill to perform web searches or generate files without the user clearly intending to activate it.
The description, trigger phrases, and usage examples are entirely specified in Chinese, implying a fixed language/locale for invocation and operation. There is no indication that users may opt into another language or that the Chinese-only constraint is intentional and justified by region-specific requirements.
The skill states that it outputs a file to ~/.openclaw/workspace/soul/[名字]/SOUL.md but does not prominently warn users that a filesystem write will occur or describe overwrite, naming, or persistence risks. This can surprise users, create unwanted artifacts, or allow ambiguous file placement if the provided name is unsafe or conflicts with existing content.
The entire persona specification is written as mandatory Chinese-language behavior for the skill, and there is no indication that users may choose another language or that the skill is intentionally limited to a Chinese-only regional context. This creates a natural-language locale policy concern because the skill appears to impose a specific language by default rather than through opt-in.
The file's natural-language instructions are entirely in Chinese and define the assistant persona and response style without indicating that the user may choose another language. This can violate language/locale policy when a skill implicitly constrains output language without explicit opt-in or documented regional justification.
The skill instructions are entirely written in Chinese and do not offer the user any language or locale choice. Under the policy for natural-language violations, a skill that effectively constrains interaction to a specific language without opt-in should be flagged unless the locale restriction is clearly justified, which it is not here.
The entire persona and response-style specification is written as a mandatory Chinese-language interaction style, and there is no indication that users may choose another language. Under the policy rule for natural-language violations, forcing a specific language without user opt-in is reportable unless the locale restriction is explicitly justified.
The entire skill definition is written as a Chinese persona/style preset with no indication that language choice is optional or user-selected. This can amount to a language/locale policy violation because it implicitly constrains responses to Chinese without presenting an opt-in or justified regional scope.
The entire skill persona and response guidance are written as mandatory Chinese instructions, with no indication that the user can opt into another language. Under the policy, forcing a specific language without user choice or clear justification is a natural-language policy violation.
The entire skill persona and operating instructions are written only in Chinese, which imposes a specific language/locale on interactions without offering the user a choice. Under the policy, language constraints should be opt-in or clearly justified as region-specific, neither of which is stated here.
The entire skill definition is written in Chinese and instructs the assistant persona in Chinese, with no indication that the user can choose another language or that the locale restriction is required for a region-specific purpose. This creates a language/locale policy concern because it implicitly constrains responses to a specific language without opt-in.
The entire skill persona and operating instructions are written only in Chinese, with no indication that the user can choose another language or that the skill is intentionally limited to a Chinese-speaking context. This creates a natural-language locale constraint that may conflict with organizational language-choice policies.
The entire skill file is written as a prescriptive persona/instruction set in Chinese, including response style requirements, with no indication that the user can choose another language. Under the policy, forcing a specific language without user opt-in is a natural-language policy violation unless the locale constraint is clearly justified.
The entire skill persona and instructions are written in Chinese, with no indication that the user can choose another language or that the locale restriction is optional. Per the policy, language or locale constraints should not be imposed without user opt-in unless clearly justified as region-specific.
The entire skill persona and operating instructions are written only in Chinese, with no indication that the user can choose another language or that the skill is intended exclusively for a Chinese-speaking or region-specific context. This creates a language/locale policy issue because the skill implicitly constrains responses to a specific language without opt-in.
The entire skill persona and behavioral instructions are written in Chinese, with no indication that the user can choose another language or that the skill is intended only for a Chinese-language context. Under the policy, forcing a specific language without opt-in is a natural-language policy concern.
The entire skill specification is written as a Chinese-language persona and provides no indication that users may interact in other languages or opt into Chinese. Under the stated policy, forcing a specific language without user choice is a natural-language policy violation.
The entire skill persona and instructions are written only in Chinese, and there is no indication that language selection is optional or limited to a justified region-specific use case. Under the policy, forcing a specific language without user opt-in is a natural-language policy violation.
The entire skill instruction is written in Chinese and specifies response style and behavior without any opt-in or indication that language selection is optional. Under the policy, forcing a specific language or locale without user choice is a natural-language policy violation unless clearly justified as region-specific.
The entire skill file is written as a response-style instruction set in Chinese, including persona, style, and reply-length guidance, with no indication that the user can choose another language. This creates a natural-language locale policy concern because it effectively constrains output language without opt-in or documented regional justification.
The entire skill definition is written in Chinese and instructs the assistant to adopt a Chinese-language persona/style, but it does not provide any user opt-in or alternative language option. Under the policy, forcing a specific language without user choice is a natural-language policy violation unless the locale constraint is explicitly justified.
The entire skill persona and response-style instructions are written as Chinese-only guidance, including reply constraints and behavioral rules, with no indication that the user can choose another language. This creates a natural-language locale policy concern because it effectively constrains the interaction language without opt-in or stated regional justification.
This preset is entirely written to impose a Chinese-language persona and response style, with no indication that the user can opt out or request another language. In a persona-generation skill, that can override user expectations, reduce accessibility, and cause the agent to disregard user language preferences or downstream application requirements.
The entire skill specification is written as a fixed Chinese-language persona and response style, with no indication that the user can choose another language. This creates a natural-language locale constraint without user opt-in, which matches the policy-violation category for language or locale restrictions.
This markdown file is entirely written as a persona specification in Chinese and provides no indication that language is selectable or optional. Under the policy rule for natural-language violations, a skill that effectively constrains responses to a specific language without user opt-in should be flagged.
No suspicious patterns detected.
