Back to skill

Security audit

World Cup Predictor

Security checks across malware telemetry and agentic risk

Overview

This is a disclosed football analysis skill that uses public match and odds sources for informational predictions, without hidden execution, credential handling, or betting actions.

Before installing, understand that this skill may browse public sports-data, news, and betting-market pages to support football predictions. Treat its outputs as analysis only, not betting advice, and prefer locale-neutral market pages if the /zh/ examples are inconvenient.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Memory PoisoningPersistent Context Injection, Context Window Stuffing, Memory Manipulation
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Findings (5)

Vague Triggers

Medium
Confidence
86% confidence
Finding
The manifest-style description says to use the skill when 'analyzing or predicting World Cup or international football matches' and then lists many broad request types such as post-match review and style matchup. While domain-specific, it does not define clear trigger boundaries or negative examples, which can cause over-invocation across general football discussion requests.

Natural-Language Policy Violations

Low
Confidence
94% confidence
Finding
The instructions direct use of `/zh/` URLs for Polymarket and Stake, which imposes a specific locale in the workflow. There is no user choice, opt-in, or documented reason for forcing the Chinese locale, so this is a natural-language locale policy issue.

Natural-Language Policy Violations

Medium
Confidence
94% confidence
Finding
The guidance directs use of `/zh/` Polymarket and Stake URLs and even references Chinese market-selector labels like `获胜盘`, which imposes a specific language/locale in the workflow. The file does not offer a user choice or explain a justified region-specific constraint, so this is a natural-language locale policy violation.

Autonomous Decision Making

Medium
Category
Excessive Agency
Content
- Separate 90-minute prediction from advancement prediction. A team can be more likely to advance without being clearly likely to win in regulation.
- Keep decision-stage probabilities unambiguous: `reach extra time` includes matches later settled in extra time or on penalties, while `decided in extra time` and `reach penalties` are separate branches. If outputting mutually exclusive stages, label them as `90-minute decision / extra-time decision / shootout decision`.
- For finals, use recent final-specific extra-time frequency only as a bounded context prior alongside current 90-minute draw prices, styles, goalkeeper quality, and attacking intent. Do not let a small historical sample override the current matchup, but do not apply a generic knockout-stage prior without checking the final-specific pattern.
- Do not apply group-stage third-place, goal-difference, or "draw is enough" logic to knockout matches. A draw after 90 minutes means extra time and possibly penalties, not a final table outcome.
- Weak or near-peer teams may rationally aim to reach extra time or penalties if their open-play chance creation is limited but their goalkeeper, penalty takers, defensive block, or fatigue profile is competitive.
- Favorites may avoid high-risk chasing while level, especially early, but should become more aggressive if extra time hurts them more than the opponent or if their bench can change chance creation.
Confidence
22% confidence
Finding
Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.

Persistent Context Injection

Medium
Category
Memory Poisoning
Content
| Market baseline | 15% | Polymarket, Stake, books, liquidity, line movement |
| Match-state/context/environment | 15% | group standings or knockout bracket, draw value, advancement path, host boost, heat, travel, governance and continuity signals |

Raise player availability above 25% when a team depends on one or two key roles: a build-up organizer, main ball progressor, primary chance creator, defensive organizer, goalkeeper, set-piece specialist, or main finisher. Use named players only as verified, tournament-specific examples; do not treat them as permanent rules. Availability means role fitness, expected minutes, and replacement quality, not just whether the player appears in the squad.

For knockout matches, raise the style-matchup weight when a favorite has not proven it can create high-quality chances against compact blocks. Paper strength, ranking, and possession become weaker inputs if the team lacks a clear box-occupation plan, reliable striker profile, second-ball pressure, or a bench route to change the rhythm after 70 minutes.
Confidence
24% confidence
Finding
Skill injects content designed to persist in agent memory or context across interactions. Persistent injection can alter agent behavior long after the initial interaction.

VirusTotal

62/62 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.