Security audit
Security checks for vulnerabilities and agentic risk
This is a simple greeting skill with minor usability mismatch, not a security threat.
Before installing, understand that this skill may answer simple greetings with only `Hello World`; do not expect localization or a conversational follow-up.
The metadata and description suggest a custom localized greeting, but the skill always emits the fixed English string 'Hello World' with no user choice. This mismatch can cause misleading behavior, override localization expectations, and reduce trust or usability, though it is not a direct security compromise on its own.
The trigger conditions are broad enough to match common conversational openers like 'hello' or 'hi', which creates a high likelihood of accidental invocation during normal user requests. Because the skill also instructs the agent to terminate further execution and return a fixed response, it can preempt legitimate multi-intent interactions and degrade expected behavior.
