Security audit
Security checks for vulnerabilities and agentic risk
This is a disclosed persona-formatting skill that changes assistant wording, with no evidence of code execution, credential access, exfiltration, or destructive behavior.
Install this only if you want Bangboo-style formatting to be active by default in enabled workspaces. Verify that saying no roleplay disables the style, and check the Cursor path packaging if you rely on Cursor-native skill loading.
The skill declares itself active by default for routine coding, debugging, docs, and chat across enabled workspaces, without narrow triggering conditions. This broad scope can cause unintended persona injection into unrelated conversations, increasing the chance of misformatting, reduced clarity, or accidental interference with safety-critical or precision tasks.
Referenced artifact was not completely inspected
- 根目录 `SKILL.md`：与上一路径内容一致，便于从仓库根浏览或单独复制
The invocation rules again state that the persona applies by default in the repository and does not require explicit user activation. This ambiguity can override user expectations and create cross-turn persistence, making the assistant behave in a transformed style even when that style is not appropriate for the task.
Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.
# Bangboo 中文语气词表（仅允许使用这些组合）
在 **Cursor** 中可与 `.cursor/skills/speak4bangboo/SKILL.md` 一并加载；在 **Claude Project / 其他平台** 若需与游戏粉向设定完全一致，请把本文件**同时粘贴或上传**为知识，否则模型仅适用该 `SKILL.md` 里「无词表时的四字回退链」规则。
音节仅含：**嗯、呢、哇、哒**。下列为合法组合；回复时需从中轮换选用，避免总用同一串。
Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.
# Bangboo 中文语气词表（仅允许使用这些组合）
在 **Cursor** 中可与 `.cursor/skills/speak4bangboo/SKILL.md` 一并加载；在 **Claude Project / 其他平台** 若需与游戏粉向设定完全一致，请把本文件**同时粘贴或上传**为知识，否则模型仅适用该 `SKILL.md` 里「无词表时的四字回退链」规则。
音节仅含：**嗯、呢、哇、哒**。下列为合法组合；回复时需从中轮换选用，避免总用同一串。
The file instructs the agent to enforce 'strict Chinese Bangboo combo fidelity' and to include a reference lexicon, which indicates a fixed language/locale behavior. There is no indication that the user can opt in, opt out, or choose an alternative language behavior.
The file recommends enforcing strict Chinese output by default without mentioning user preference, locale detection, or opt-in. This can override user expectations, reduce usability, and create prompt-behavior conflicts in downstream integrations, especially where language choice affects safety, accessibility, or operator comprehension.
When language is hard to determine, the skill defaults to Chinese without user opt-in. This can cause unintended language switching, reduce comprehension, and create reliability issues in mixed-language or accessibility-sensitive contexts.
Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.
## Recommended mapping
- Cursor: `.cursor/skills/speak4bangboo/SKILL.md`
- Claude: `prompts/claude-project.md`
- OpenClaw-like runtimes: `prompts/openclaw-system.md`
- Shared canonical rules: `prompts/core-rules.md`
Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.
## Recommended mapping
- Cursor: `.cursor/skills/speak4bangboo/SKILL.md`
- Claude: `prompts/claude-project.md`
- OpenClaw-like runtimes: `prompts/openclaw-system.md`
- Shared canonical rules: `prompts/core-rules.md`
Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.
## Recommended mapping
- Cursor: `.cursor/skills/speak4bangboo/SKILL.md`
- Claude: `prompts/claude-project.md`
- OpenClaw-like runtimes: `prompts/openclaw-system.md`
- Shared canonical rules: `prompts/core-rules.md`
Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.
## Recommended mapping
- Cursor: `.cursor/skills/speak4bangboo/SKILL.md`
- Claude: `prompts/claude-project.md`
- OpenClaw-like runtimes: `prompts/openclaw-system.md`
- Shared canonical rules: `prompts/core-rules.md`
Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.
## Recommended mapping
- Cursor: `.cursor/skills/speak4bangboo/SKILL.md`
- Claude: `prompts/claude-project.md`
- OpenClaw-like runtimes: `prompts/openclaw-system.md`
- Shared canonical rules: `prompts/core-rules.md`
Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.
## Recommended mapping
- Cursor: `.cursor/skills/speak4bangboo/SKILL.md`
- Claude: `prompts/claude-project.md`
- OpenClaw-like runtimes: `prompts/openclaw-system.md`
- Shared canonical rules: `prompts/core-rules.md`
The validation checklist requires Chinese input to produce a constrained Chinese grunt style and English input to produce a different fixed style, indicating a locale/language-specific behavior policy baked into the skill. The file does not present this as an optional user choice or clearly justify the constraint as region-specific compliance, so it appears to force language behavior by policy.
The instructions require the assistant to switch to a Chinese-specific or English-specific format depending on detected user language. This imposes a locale/language behavior automatically rather than offering the user a choice, which matches the policy category for language or locale constraints without opt-in.
The phrase "Better Chinese/English consistency for Bangboo voice" describes enforced language-style behavior for the skill, but this README does not mention any user opt-in, language selection, or locale scoping. Because language/locale policy violations apply to all file types, this is a low-severity natural-language policy concern.
No suspicious patterns detected.