Security checks for vulnerabilities and agentic risk
Overview
This is a local prompt-generation skill that prints user-directed SOUL.md content and does not itself read private data, write files, call the network, or install persistence.
Install only if you want an English-language persona/avatar prompt generator. Review the generated SOUL.md text before pasting it into a persistent system prompt, because it is designed to influence an agent's style and identity across later use.
The title and introduction identify this as an "English Version," which imposes a language constraint in the skill's natural-language description. The file does not offer opt-in language selection or explain why English-only behavior is required, matching the language/locale policy violation criteria.
Content
No source excerpt is available for this finding.
Natural-Language Policy Violations
Medium
Category
Not specified by scanner
Confidence
94% confidence
Finding
The skill branding and introductory text explicitly present the experience as English-only without offering a user language choice or documenting why a locale restriction is necessary. This can exclude or mislead non-English users and may cause unsafe or incorrect use if users misunderstand instructions, though it is not a direct code-execution or data-security issue.
Content
No source excerpt is available for this finding.
Natural-Language Policy Violations
Medium
Category
Not specified by scanner
Confidence
83% confidence
Finding
The reference identifier includes an explicit "EN" locale marker, and the document presents the protocol in that fixed language context without any opt-in or alternative-language provision. Under the policy, forcing a specific language without user choice can be a natural-language locale violation unless clearly justified as region-specific, which is not stated here.
Content
No source excerpt is available for this finding.
Natural-Language Policy Violations
Medium
Category
Not specified by scanner
Confidence
94% confidence
Finding
The skill name and short description explicitly position the skill as producing 'advanced English SOUL.md prompts'. This is a natural-language locale constraint, but the manifest provides no indication of user opt-in, language choice, or a documented region-specific justification.
Content
No source excerpt is available for this finding.
YARA rule 'network_reconnaissance': Network reconnaissance and scanning patterns [hacktools]
Medium
Category
YARA Match
Confidence
65% confidence
Finding
YARA rule matched a hack tool or exploit indicator (offensive tools, reconnaissance, privilege escalation, or exploit frameworks).
Content
Scanner excerpt · skill.py (reported line 37)May include surrounding context.