Back to skill

Security audit

WOSO Lib

Security checks for vulnerabilities and agentic risk

Overview

This appears to be a benign Chinese-language women’s football knowledge base, with content-quality notes but no hidden execution, credential access, persistence, or destructive behavior.

Install only if you want a Chinese women’s football reference skill. Treat it as an authored summary library rather than a verified database: some facts and corpus descriptions may need checking, and some notes discuss traumatic injury or suicide without warning.

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (71)

Vague Triggers

Medium
Category
Not specified by scanner
Confidence
90% confidence
Finding

The manifest description embeds trigger words such as “世界杯”, “工作量”, and “月经周期” alongside domain-specific terms. Several of these are common topics that can arise in ordinary conversation outside the intended women's-football knowledge context, and the file does not provide exclusion conditions or negative examples to narrow activation scope.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
97% confidence
Finding

The instruction “用中文回答” imposes a fixed language requirement in the skill's natural-language policy. Under the stated policy, forcing a specific language without offering user choice or documenting a justified locale constraint is a violation.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
91% confidence
Finding

This markdown file is entirely written in Chinese and presents the skill content as Chinese-only, with no indication that users may choose another language or that the locale restriction is required for a region-specific purpose. Under the policy, language constraints without user opt-in or clear justification are natural-language policy violations.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
98% confidence
Finding

This markdown file presents all instructions and content in Chinese, which effectively forces a specific language on the user. The policy allows locale constraints only when the skill offers opt-in choice or clearly documents a justified region-specific purpose, neither of which appears here.

Content

No source excerpt is available for this finding.

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

This markdown file includes detailed discussion of traumatic brain injury, suicidal ideation, and two suicide crises, including methods/context, but provides no upfront warning that the content may be distressing. Under the markdown-specific warning criterion, sensitive content affecting user wellbeing should be disclosed.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
97% confidence
Finding

The document title and the entire note content are written in Chinese, indicating a fixed language/locale presentation. Under the policy, forcing a specific language without user opt-in is a natural-language policy violation unless the locale constraint is clearly documented and justified, which is not present here.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
93% confidence
Finding

This markdown file presents the skill content entirely in Chinese, including headings, descriptions, and guidance, but does not indicate that the user can choose another language or that the skill is intentionally limited to a Chinese-speaking audience. Under the language/locale policy, forcing a specific language without user opt-in is a natural-language policy concern.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
96% confidence
Finding

This file is natural-language content and appears to require Chinese comprehension throughout, from the title to all instructions and examples. The policy for this audit flags language or locale constraints when a skill forces a specific language without user opt-in, and this file does not offer alternatives or explain why Chinese is required.

Content

No source excerpt is available for this finding.

Intent-Code Divergence

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

The note contains a factual contradiction by calling Wiegman a World Cup champion coach while the same document later states the Netherlands finished as runner-up in the 2019 World Cup. In a knowledge-base skill, this undermines integrity and can mislead users who rely on the notes for factual sports history, making it a genuine content-integrity issue even if it is not an exploit in the traditional code-execution sense.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
94% confidence
Finding

This markdown file presents the skill content entirely in Chinese, including instructions and headings, with no indication that the user can choose another language. Under the policy, forcing a specific language without user opt-in is a natural-language policy violation unless the locale limitation is explicitly justified.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
83% confidence
Finding

The document presents its structure and headings bilingually with Chinese prominently included, but there is no natural-language indication that language choice is optional or user-selected. Under the policy rule, content that imposes a language/locale without opt-in can be a violation unless clearly justified as region-specific.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
92% confidence
Finding

This markdown file uses Chinese throughout headings, descriptions, and instructions, which effectively forces a specific language for users. The file does not offer an alternative language option or explain that the skill is intentionally region- or locale-specific.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
93% confidence
Finding

The skill description, headings, and all usage examples are written in Chinese, which effectively imposes a single language on users. The file does not mention that Chinese is optional, nor does it offer an alternative locale or language choice.

Content

No source excerpt is available for this finding.

Intent-Code Divergence

Low
Category
Not specified by scanner
Confidence
84% confidence
Finding

The README documents the skill as covering '19本全球女足专著', which conflicts with the manifest's stated scope of 33 books, 10 reports, and coach interview transcripts. This is an intent/documentation mismatch about what the skill contains, even though no executable code is present in this file.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
94% confidence
Finding

This markdown file is written exclusively in Chinese and does not indicate that the user can choose another language or that the content is intentionally limited to a Chinese-speaking audience. Under the natural-language policy rules, forcing a specific language without user opt-in can be a locale-policy issue.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
95% confidence
Finding

This markdown file contains user-facing natural language content exclusively in Chinese, including the title and all section text. Under the policy, forcing a specific language without user opt-in can be a natural-language policy violation when no alternative language option or justification is provided.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
91% confidence
Finding

The document is entirely written in Chinese and the title includes Chinese labeling ('精华笔记'), which reflects a fixed language choice in the skill content. Under the policy rule, forcing a specific language without user opt-in can be a natural-language policy violation when no justification or language-selection option is provided.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
93% confidence
Finding

This file appears to be a skill-related note written almost entirely in Chinese, including headings and explanatory text, while also embedding English terms. Under the policy rule for natural-language violations, forcing a specific language without user opt-in can be a violation when no choice or justification is provided.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
84% confidence
Finding

This markdown file contains user-facing natural language that assumes Chinese as the required language throughout. Under the policy, forcing a specific language without user opt-in can be a locale/language policy violation unless the constraint is explicitly documented and justified.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
83% confidence
Finding

The entire document is written in Chinese and does not indicate any option for users to choose another language or locale. Under the policy rule for natural-language violations, forcing a specific language without opt-in can be flagged unless the locale constraint is explicitly documented and justified.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
81% confidence
Finding

该文件的自然语言内容整体仅以中文呈现,未见提供其他语言选项、用户选择机制,或说明该笔记为何必须限定为中文。按规则,强制特定语言而无用户选择可能构成语言/locale 政策问题。

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
93% confidence
Finding

SQP-3 applies to all file types and covers natural-language policy violations such as forcing a specific language without user opt-in. This markdown note is fully written in Chinese, and there is no indication that the user may choose another language or that the Chinese-only format is required for a region-specific purpose.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
90% confidence
Finding

This markdown file presents the skill content in Chinese from the title onward, while also including English source references, but it does not state that the language choice is optional or tied to a specific regional use case. Under the policy rule for language or locale constraints, forcing a specific language without user opt-in is a natural-language policy concern.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
93% confidence
Finding

This markdown file consists primarily of Chinese-language instructional/content text and does not indicate that the user opted into Chinese or that the note is intended only for a Chinese-speaking audience. Under the language/locale policy check, forcing a single language without opt-in can be a natural-language policy violation.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
83% confidence
Finding

该 Markdown 文件主体内容几乎全部使用中文撰写,面向读者说明处也未提供可选语言或说明这是仅限中文受众的区域性材料。按照语言/locale 政策,如果技能内容强制单一语言且无用户选择,可能构成自然语言层面的政策问题。

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.