Security audit
Security checks for vulnerabilities and agentic risk
This skill is a disclosed Gougoubi prediction-market creation workflow with crypto transaction steps that require wallet confirmation.
Install only if you intend agents to help create public Gougoubi prediction markets. Review the generated rules, tags, stake amount, language fallback, group details, and every wallet approval or transaction before confirming.
The skill silently normalizes unsupported language values to English, which changes user intent without explicit consent. In a transaction-creating workflow, this can cause users to publish market content in an unintended language, increasing the risk of misrepresentation, moderation issues, or users approving on-chain/public content they do not realize has been transformed.
Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.
## Boundaries
- Never skip group creation.
- Never auto-confirm approvals or irreversible wallet actions.
- Require user confirmation if moderation risk is detected.
The description triggers on a very broad condition: 'Use when users want to publish a new Gougoubi prediction market from marketName plus deadline.' In an agent/tool-selection context, this can cause over-invocation for loosely related user requests, increasing the chance that a crypto/transaction-capable workflow is selected without sufficiently explicit user intent or boundary checks.
No suspicious patterns detected.