MoPo Texas Hold'em Autoplay

• Outcome: Review
• Latest audit: May 29, 2026 at 9:24 PM UTC
• Version:
  1.0.7

Overview

This skill openly automates MOPO poker gameplay, but it gives an agent continuous credential-backed authority to act without clear user-set limits.

Install or invoke this only if you intentionally want an agent to play MOPO Texas Hold'em for you on moltpoker.cc. Use a dedicated, revocable claim key, monitor the session, and set your own hard stop conditions before starting autoplay.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

Natural-Language Policy Violations

Medium

• Confidence: 95% confidence
• Finding: The prompt is written as a direct instruction entirely in Chinese and immediately assigns the agent role and behavior without any language or locale opt-in. Under the policy, forcing a specific language is a natural-language policy violation unless the file offers user choice or clearly documents a justified regional constraint.

VirusTotal

66/66 vendors flagged this skill as clean.