Security audit
Security checks for vulnerabilities and agentic risk
The skill appears to be a legitimate AI personality genome tool, but its instructions run unqualified local Python scripts that are not included in the package, so installation should be reviewed before use.
Before installing, verify that the package really provides encoder.py, visualize.py, agent_report.py, and the genome library, and that the agent runs those exact packaged files rather than arbitrary files from your current project. Also expect encoding to send SOUL.md content to Claude as disclosed, and expect the bundled HTML pages to contact Google Fonts when opened unless fonts are removed or self-hosted.
Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.
<div class="container">
<!-- ══════════════════════════════════════════════════════════════════════ -->
<!-- HERO -->
<!-- ══════════════════════════════════════════════════════════════════════ -->
<div class="hero fade-in">
Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.
</div>
<!-- ══════════════════════════════════════════════════════════════════════ -->
<!-- SECTION 1: WHY -->
<!-- ══════════════════════════════════════════════════════════════════════ -->
<div class="section fade-in">
<div class="section-label">Section 01</div>
Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.
<div class="divider"></div>
<!-- ══════════════════════════════════════════════════════════════════════ -->
<!-- SECTION 2: HOW IT WORKS -->
<!-- ══════════════════════════════════════════════════════════════════════ -->
<div class="section fade-in">
<div class="section-label">Section 02</div>
Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.
</ol>
</div>
<!-- Evaluation -->
<div class="card">
<h3>Evaluation: How We Measure Fitness</h3>
<p>
Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.
<div class="divider"></div>
<!-- ══════════════════════════════════════════════════════════════════════ -->
<!-- SECTION 4: RESULTS -->
<!-- ══════════════════════════════════════════════════════════════════════ -->
<div class="section fade-in">
<div class="section-label">Section 04</div>
Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.
<div class="divider"></div>
<!-- ══════════════════════════════════════════════════════════════════════ -->
<!-- SECTION 5: IMPLICATIONS -->
<!-- ══════════════════════════════════════════════════════════════════════ -->
<div class="section fade-in">
<div class="section-label">Section 05</div>
Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.
<div class="divider"></div>
<!-- ══════════════════════════════════════════════════════════════════════ -->
<!-- SECTION 6: LOOKING FORWARD -->
<!-- ══════════════════════════════════════════════════════════════════════ -->
<div class="section fade-in">
<div class="section-label">Section 06</div>
Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.
</div>
<!-- ══════════════════════════════════════════════════════════════════════ -->
<!-- APPENDIX: METHODOLOGY DETAILS -->
<!-- ══════════════════════════════════════════════════════════════════════ -->
<div class="divider"></div>
The page imports a third-party Google Fonts stylesheet from fonts.googleapis.com even though this file is a static experiment report. Loading external resources causes client IP, user-agent, referrer, and timing metadata to be disclosed to a third party, and it introduces an avoidable supply-chain/dependency surface unrelated to the core local functionality.
The external font import silently fetches resources from a third party without any user-facing disclosure or consent. Even though this is only a font request, it still leaks browsing metadata and creates an unexpected network dependency that users may not anticipate when opening a local/static skill asset.
The document sets the root language to English via lang="en", and the visible interface copy is entirely English. Under the stated policy, forcing a specific language without user opt-in can be a natural-language locale policy violation when no alternative or justification is provided.
The page imports Google Fonts from a third-party origin, which causes client browsers to contact an external service and disclose metadata such as IP address, user agent, and timing information. For a skill presented as a local personality/genome exploration tool, this undermines local-only expectations and introduces an unnecessary supply-chain/privacy dependency, though it is not direct code execution.