Back to skill

Security audit

Persian Language

Security checks for vulnerabilities and agentic risk

Overview

This is a Persian-language writing aid with no executable code or hidden high-impact behavior; scanner alerts are explained by normal Persian formatting characters and broad but relevant language defaults.

Install this only if you want the agent to apply Persian-language conventions when Persian content is involved. Be aware it may normalize punctuation, digits, half-spaces, register, and Iranian date conventions in Persian output, so review results carefully for legal, financial, archival, or data-preservation tasks.

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • YARA SignaturesMalware Match, Webshell Match, Cryptominer Match
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (144)

YARA rule 'agent_skill_mcp_tool_poisoning_metadata': MCP/tool metadata poisoning indicators in tool schemas or skill manifests [agent_skills]

High
Category
YARA Match
Confidence
80% confidence
Finding

YARA rule matched a hack tool or exploit indicator (offensive tools, reconnaissance, privilege escalation, or exploit frameworks).

Content

Scanner excerpt · SKILL.md (reported line 4)May include surrounding context.

md
---
name: persian-language
version: 1.0.0
description: Enhances AI ability to read, write, translate, and format Persian (Farsi) with native-level accuracy across any task. Handles Unicode, half-spaces, RTL, registers, ta'arof, Solar Hijri dates, and cultural nuance.
metadata: {"openclaw": {"emoji": "📝"}}
---

# Persian Language Skill

## Identity

A capability layer that enhances the agent's ability to **read, write, translate, and format Persian (Farsi)** across any task. Not a tutor. Not a chatbot persona. A quality multiplier for any workflow involving Persian.

---

## Triggers

Activate this skill when any of the following ar

Hidden Instructions

High
Category
Prompt Injection
Confidence
60% confidence
Finding

Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.

Content

Scanner excerpt · README.md (reported line 10)May include surrounding context.

Persian has a wide gap between formal written language and everyday spoken language — wider than English. Choosing the right register is critical for sounding natural.

text
خیلی رسمی (Very Formal) ←——————————→ خیلی محاوره‌ای (Very Colloquial)
Legal/Academic   Business    Standard    Casual Written    Spoken Tehran

Hidden Instructions

High
Category
Prompt Injection
Confidence
60% confidence
Finding

Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.

Content

Scanner excerpt · README.md (reported line 79)May include surrounding context.

Persian has a wide gap between formal written language and everyday spoken language — wider than English. Choosing the right register is critical for sounding natural.

text
خیلی رسمی (Very Formal) ←——————————→ خیلی محاوره‌ای (Very Colloquial)
Legal/Academic   Business    Standard    Casual Written    Spoken Tehran

Hidden Instructions

High
Category
Prompt Injection
Confidence
60% confidence
Finding

Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.

Content

Scanner excerpt · README.md (reported line 107)May include surrounding context.

Persian has a wide gap between formal written language and everyday spoken language — wider than English. Choosing the right register is critical for sounding natural.

text
خیلی رسمی (Very Formal) ←——————————→ خیلی محاوره‌ای (Very Colloquial)
Legal/Academic   Business    Standard    Casual Written    Spoken Tehran

Hidden Instructions

High
Category
Prompt Injection
Confidence
60% confidence
Finding

Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.

Content

Scanner excerpt · README.md (reported line 195)May include surrounding context.

Persian has a wide gap between formal written language and everyday spoken language — wider than English. Choosing the right register is critical for sounding natural.

text
خیلی رسمی (Very Formal) ←——————————→ خیلی محاوره‌ای (Very Colloquial)
Legal/Academic   Business    Standard    Casual Written    Spoken Tehran

Hidden Instructions

High
Category
Prompt Injection
Confidence
60% confidence
Finding

Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.

Content

Scanner excerpt · README.md (reported line 210)May include surrounding context.

Persian has a wide gap between formal written language and everyday spoken language — wider than English. Choosing the right register is critical for sounding natural.

text
خیلی رسمی (Very Formal) ←——————————→ خیلی محاوره‌ای (Very Colloquial)
Legal/Academic   Business    Standard    Casual Written    Spoken Tehran

Hidden Instructions

High
Category
Prompt Injection
Confidence
60% confidence
Finding

Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.

Content

Scanner excerpt · README.md (reported line 259)May include surrounding context.

Persian has a wide gap between formal written language and everyday spoken language — wider than English. Choosing the right register is critical for sounding natural.

text
خیلی رسمی (Very Formal) ←——————————→ خیلی محاوره‌ای (Very Colloquial)
Legal/Academic   Business    Standard    Casual Written    Spoken Tehran

Hidden Instructions

High
Category
Prompt Injection
Confidence
60% confidence
Finding

Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 36)May include surrounding context.

Persian has a wide gap between formal written language and everyday spoken language — wider than English. Choosing the right register is critical for sounding natural.

text
خیلی رسمی (Very Formal) ←——————————→ خیلی محاوره‌ای (Very Colloquial)
Legal/Academic   Business    Standard    Casual Written    Spoken Tehran

Hidden Instructions

High
Category
Prompt Injection
Confidence
60% confidence
Finding

Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 53)May include surrounding context.

Persian has a wide gap between formal written language and everyday spoken language — wider than English. Choosing the right register is critical for sounding natural.

text
خیلی رسمی (Very Formal) ←——————————→ خیلی محاوره‌ای (Very Colloquial)
Legal/Academic   Business    Standard    Casual Written    Spoken Tehran

Hidden Instructions

High
Category
Prompt Injection
Confidence
60% confidence
Finding

Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 106)May include surrounding context.

Persian has a wide gap between formal written language and everyday spoken language — wider than English. Choosing the right register is critical for sounding natural.

text
خیلی رسمی (Very Formal) ←——————————→ خیلی محاوره‌ای (Very Colloquial)
Legal/Academic   Business    Standard    Casual Written    Spoken Tehran

Hidden Instructions

High
Category
Prompt Injection
Confidence
60% confidence
Finding

Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 134)May include surrounding context.

Persian has a wide gap between formal written language and everyday spoken language — wider than English. Choosing the right register is critical for sounding natural.

text
خیلی رسمی (Very Formal) ←——————————→ خیلی محاوره‌ای (Very Colloquial)
Legal/Academic   Business    Standard    Casual Written    Spoken Tehran

Hidden Instructions

High
Category
Prompt Injection
Confidence
60% confidence
Finding

Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 153)May include surrounding context.

Persian has a wide gap between formal written language and everyday spoken language — wider than English. Choosing the right register is critical for sounding natural.

text
خیلی رسمی (Very Formal) ←——————————→ خیلی محاوره‌ای (Very Colloquial)
Legal/Academic   Business    Standard    Casual Written    Spoken Tehran

Hidden Instructions

High
Category
Prompt Injection
Confidence
60% confidence
Finding

Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.

Content

Scanner excerpt · references/common-mistakes.md (reported line 27)May include surrounding context.

Persian has a wide gap between formal written language and everyday spoken language — wider than English. Choosing the right register is critical for sounding natural.

text
خیلی رسمی (Very Formal) ←——————————→ خیلی محاوره‌ای (Very Colloquial)
Legal/Academic   Business    Standard    Casual Written    Spoken Tehran

Hidden Instructions

High
Category
Prompt Injection
Confidence
60% confidence
Finding

Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.

Content

Scanner excerpt · references/common-mistakes.md (reported line 28)May include surrounding context.

Persian has a wide gap between formal written language and everyday spoken language — wider than English. Choosing the right register is critical for sounding natural.

text
خیلی رسمی (Very Formal) ←——————————→ خیلی محاوره‌ای (Very Colloquial)
Legal/Academic   Business    Standard    Casual Written    Spoken Tehran

Hidden Instructions

High
Category
Prompt Injection
Confidence
60% confidence
Finding

Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.

Content

Scanner excerpt · references/common-mistakes.md (reported line 29)May include surrounding context.

Persian has a wide gap between formal written language and everyday spoken language — wider than English. Choosing the right register is critical for sounding natural.

text
خیلی رسمی (Very Formal) ←——————————→ خیلی محاوره‌ای (Very Colloquial)
Legal/Academic   Business    Standard    Casual Written    Spoken Tehran

Hidden Instructions

High
Category
Prompt Injection
Confidence
60% confidence
Finding

Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.

Content

Scanner excerpt · references/common-mistakes.md (reported line 30)May include surrounding context.

Persian has a wide gap between formal written language and everyday spoken language — wider than English. Choosing the right register is critical for sounding natural.

text
خیلی رسمی (Very Formal) ←——————————→ خیلی محاوره‌ای (Very Colloquial)
Legal/Academic   Business    Standard    Casual Written    Spoken Tehran

Hidden Instructions

High
Category
Prompt Injection
Confidence
60% confidence
Finding

Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.

Content

Scanner excerpt · references/common-mistakes.md (reported line 31)May include surrounding context.

Persian has a wide gap between formal written language and everyday spoken language — wider than English. Choosing the right register is critical for sounding natural.

text
خیلی رسمی (Very Formal) ←——————————→ خیلی محاوره‌ای (Very Colloquial)
Legal/Academic   Business    Standard    Casual Written    Spoken Tehran

Hidden Instructions

High
Category
Prompt Injection
Confidence
60% confidence
Finding

Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.

Content

Scanner excerpt · references/common-mistakes.md (reported line 45)May include surrounding context.

Persian has a wide gap between formal written language and everyday spoken language — wider than English. Choosing the right register is critical for sounding natural.

text
خیلی رسمی (Very Formal) ←——————————→ خیلی محاوره‌ای (Very Colloquial)
Legal/Academic   Business    Standard    Casual Written    Spoken Tehran

Hidden Instructions

High
Category
Prompt Injection
Confidence
60% confidence
Finding

Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.

Content

Scanner excerpt · references/common-mistakes.md (reported line 46)May include surrounding context.

Persian has a wide gap between formal written language and everyday spoken language — wider than English. Choosing the right register is critical for sounding natural.

text
خیلی رسمی (Very Formal) ←——————————→ خیلی محاوره‌ای (Very Colloquial)
Legal/Academic   Business    Standard    Casual Written    Spoken Tehran

Hidden Instructions

High
Category
Prompt Injection
Confidence
60% confidence
Finding

Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.

Content

Scanner excerpt · references/common-mistakes.md (reported line 47)May include surrounding context.

Persian has a wide gap between formal written language and everyday spoken language — wider than English. Choosing the right register is critical for sounding natural.

text
خیلی رسمی (Very Formal) ←——————————→ خیلی محاوره‌ای (Very Colloquial)
Legal/Academic   Business    Standard    Casual Written    Spoken Tehran

Hidden Instructions

High
Category
Prompt Injection
Confidence
60% confidence
Finding

Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.

Content

Scanner excerpt · references/common-mistakes.md (reported line 56)May include surrounding context.

Persian has a wide gap between formal written language and everyday spoken language — wider than English. Choosing the right register is critical for sounding natural.

text
خیلی رسمی (Very Formal) ←——————————→ خیلی محاوره‌ای (Very Colloquial)
Legal/Academic   Business    Standard    Casual Written    Spoken Tehran

Hidden Instructions

High
Category
Prompt Injection
Confidence
60% confidence
Finding

Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.

Content

Scanner excerpt · references/common-mistakes.md (reported line 63)May include surrounding context.

Persian has a wide gap between formal written language and everyday spoken language — wider than English. Choosing the right register is critical for sounding natural.

text
خیلی رسمی (Very Formal) ←——————————→ خیلی محاوره‌ای (Very Colloquial)
Legal/Academic   Business    Standard    Casual Written    Spoken Tehran

Hidden Instructions

High
Category
Prompt Injection
Confidence
60% confidence
Finding

Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.

Content

Scanner excerpt · references/common-mistakes.md (reported line 64)May include surrounding context.

Persian has a wide gap between formal written language and everyday spoken language — wider than English. Choosing the right register is critical for sounding natural.

text
خیلی رسمی (Very Formal) ←——————————→ خیلی محاوره‌ای (Very Colloquial)
Legal/Academic   Business    Standard    Casual Written    Spoken Tehran

Hidden Instructions

High
Category
Prompt Injection
Confidence
60% confidence
Finding

Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.

Content

Scanner excerpt · references/common-mistakes.md (reported line 86)May include surrounding context.

Persian has a wide gap between formal written language and everyday spoken language — wider than English. Choosing the right register is critical for sounding natural.

text
خیلی رسمی (Very Formal) ←——————————→ خیلی محاوره‌ای (Very Colloquial)
Legal/Academic   Business    Standard    Casual Written    Spoken Tehran

Hidden Instructions

High
Category
Prompt Injection
Confidence
60% confidence
Finding

Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.

Content

Scanner excerpt · references/common-mistakes.md (reported line 87)May include surrounding context.

Persian has a wide gap between formal written language and everyday spoken language — wider than English. Choosing the right register is critical for sounding natural.

text
خیلی رسمی (Very Formal) ←——————————→ خیلی محاوره‌ای (Very Colloquial)
Legal/Academic   Business    Standard    Casual Written    Spoken Tehran

Static analysis

No suspicious patterns detected.