Security audit
Security checks for vulnerabilities and agentic risk
This markdown-only skill is not malware, but it is built to produce rapid Bitcoin/Kalshi betting guidance with broad triggers and limited risk boundaries.
Install only if you specifically want a short-term BTC/Kalshi betting assistant. Treat its outputs as speculative, not financial or gambling advice, and avoid enabling it for general Bitcoin or trading questions unless you are comfortable with wagering-oriented recommendations.
The manifest description uses broad trigger language such as 'any short-term BTC direction query for Kalshi or trading,' which can cause the skill to activate for a wide range of trading-related prompts. Overbroad invocation is risky here because it may inject specialized gambling/trading guidance where the user did not clearly request it.
The activation text says to use the skill any time the user asks for 15-minute Bitcoin sentiment, direction, Kalshi bet, or short-term outlook, which is ambiguous and may match loosely related requests. Because the skill includes betting-oriented output, accidental invocation can expose users to financial-risk guidance outside the intended context.
The skill’s declared purpose is concise 15-minute BTC sentiment, but the body expands into actionable betting guidance, including a Kalshi betting angle and bankroll rules. This creates scope drift from analysis into financial/gambling advice, increasing the chance the agent provides risky recommendations without appropriate safeguards, disclosures, or suitability checks.
The skill provides betting-oriented guidance, including a 'Kalshi Angle' and bankroll rules, but lacks any explicit warning that this is financial/gambling-risk content. In this context, absence of warnings increases the chance users treat speculative, very-short-term signals as reliable advice and engage in harmful or unsuitable betting behavior.
The persistent bankroll and betting-discipline section operationalizes gambling behavior beyond the stated purpose of short-term BTC sentiment. In context, this is more dangerous because the skill is optimized for rapid 15-minute decisions, which can encourage repeated wagering based on thin signals while presenting a veneer of disciplined strategy.
No suspicious patterns detected.
