Security audit
Security checks for vulnerabilities and agentic risk
This skill is a disclosed HKJC race-card and recommendation tool with no evidence of hidden execution, credential access, persistence, or data exfiltration.
Before installing, understand that this tool fetches unofficial HKJC racing data over the network and produces heuristic racing picks that should not be treated as betting advice. Expect English-only output, npm dependency installation, and in-memory caching; no credentials are required.
The documentation explicitly states "English output only," which imposes a language restriction on users. Under the policy, forcing a specific language without user opt-in or a clearly justified regional/compliance need is a natural-language policy violation.
This line says the skill returns English names by default and that Chinese names are not used in output, which further codifies a fixed language policy. Because no user choice or justified locale constraint is provided, this conflicts with the language/locale policy criteria.
The manifest restricts the language parameter to en and explicitly states that only English is supported. Under the policy criteria, this is a language/locale constraint without user opt-in or a documented region-specific justification.
The manifest description frames the skill as a Hong Kong Jockey Club race-card and recommendation tool, which implies retrieving racing data and computing picks from that domain data. The newsBoost option expands scope to external web/news sentiment gathering via Brave search, which is a materially different behavior not reflected in the stated purpose of fetching HKJC cards and analyzing form.
This code explicitly fixes user-facing reason phrases to English and later also maps horse, jockey, trainer, class, and going fields using only English variants. Because the skill enforces a specific language/locale without opt-in or documented justification, it matches the language/locale policy violation category.
The code explicitly states 'English only' and then selects only *_en fields such as name_en, raceClass_en, and go_en, with no fallback or user choice. That is a natural-language locale restriction applied across outputs, which violates the policy unless users can opt in or the limitation is clearly justified.
The code comment at L595 says the last6run string is 'NEWEST first, oldest last' and reverses it, but earlier comments and later logic consistently assume the source data is oldest-first after reversal is applied for recency analysis. This is an active contradiction in code documentation because the stated source ordering does not align with how the rest of the module interprets pastRuns.
The version history confirms that English-only behavior is an intentional enforced product behavior rather than incidental wording. This supports the presence of a language restriction without user opt-in.
The dependency uses a caret range (^1.0.0), which allows automatic installation of future 1.x releases that have not been reviewed by the skill author. If the upstream package is compromised or introduces a malicious or vulnerable update, consumers of this skill could pull that version during install, creating a software supply chain risk.
"author": "Steven Ho",
"license": "MIT",
"dependencies": {
"hkjc-api": "^1.0.0"
}
}
No suspicious patterns detected.