Skills/ClawHub/woso-lib

woso-lib@2.12.0

CAUTION· static only

Publisher claims: "世界女足知识库，覆盖33本全球经典专著+10份权威产业/科学报告精华内容+主教练采访实录，支持对话式查阅。涵盖美国、欧洲、亚洲顶级球员与教练的真实故事，以及球员工作量、体能分析、人口统计等前沿运动科学议题。触发词：女足、女子足球、女足球员、女足教练、世界杯、球员自传、工作量、月经周期、米利西奇" Observed in sandbox: static analysis only — behavior not yet observed.

Registry ClawHubPublisher wongeven · publishing for 162 daysInstalls 1,802Last detonated 9 h ago
What would fix thisWatchDispute verdict

Coverage

Static only; nothing was run yet.

The label rests on the code, the instruction files and the publisher. The honeypot run replaces this verdict when it completes.

Is [email protected] safe to install?

KillerSkills analysed it statically (a sandbox run is pending) on 2026-11-14 and scored it 70/100 (Caution). It is not known to be malicious, but it has behaviour or code a security policy should decide on before install. Notable findings: Prompt injection; Prompt injection; Prompt injection. Summary: static analysis only — behavior not yet observed.

Behavior trace

Queued for honeypot run · static analysis only
t+CategoryObserved action

This version has not been detonated yet. The score above counts behavior as unknown (50/100), so it cannot read Verified until the honeypot run completes and replaces this verdict.

Static findings

LOW
Prompt injectionnotes/everything_your_coach_never_told_you_notes.md:15 · Prompt injection — known jailbreak technique reference · informational: not an instruction fileDan Blank 在序言中说了一个让人不舒服的真相：很多教练会告诉男球员"去抢那个球"，但面对女球员时，他们会说"小心别受伤"。Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST01
CRITICAL
Prompt injectionSKILL.md:38 · Prompt injection — known jailbreak technique reference- 🧠 **战术智慧**：Dan Blank Soccer IQ 系列（速度决策、攻防转换）Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST01
LOW
Prompt injectionnotes/everything_your_coach_never_told_you_notes.md:3 · Prompt injection — known jailbreak technique reference · informational: not an instruction file**Dan Blank 著**Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST01
LOW
Prompt injectionREADME.md:54 · Prompt injection — known jailbreak technique reference · informational: not an instruction file| Everything Your Coach Never Told You | Dan Blank | 心智训练与控制可控因素 |Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST01
LOW
Prompt injectionnotes/everything_your_coach_never_told_you_notes.md:25 · Prompt injection — known jailbreak technique reference · informational: not an instruction file"Find Yourself Guilty"（发现自己有罪）— 这是全书最重要的一章。Dan Blank 认为，失败后第一时间找借口（裁判不公、队友失误、天气太差）是人类的本能，但真正的球员会先问自己：我能做什么不同？Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST01
CRITICAL
Prompt injectionSKILL.md:109 · Prompt injection — known jailbreak technique reference| Soccer IQ Volume 2 | Dan Blank | `notes/soccer_iq_vol2_notes.md` | 攻防转换，人数优势创造 |Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST01
LOW
Prompt injectionnotes/everything_your_coach_never_told_you_notes.md:9 · Prompt injection — known jailbreak technique reference · informational: not an instruction file美国青少年足球教练 Dan Blank 写给女足球员的心智训练手册，填补教练不教但其实最重要的那些东西——承担责任、控制可控因素、愿意做脏活累活。这本书非常实用，几乎是"足球生存手册"。Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST01
CRITICAL
Prompt injectionSKILL.md:107 · Prompt injection — known jailbreak technique reference| Everything Your Coach Never Told You | Dan Blank | `notes/everything_your_coach_never_told_you_notes.md` | 心智训练，脏活累活 |Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST01
CRITICAL
Prompt injectionSKILL.md:108 · Prompt injection — known jailbreak technique reference| Soccer IQ Volume 1 | Dan Blank | `notes/soccer_iq_vol1_notes.md` | 速度决策，球员思维入门 |Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST01
LOW
Prompt injectionnotes/everything_your_coach_never_told_you_notes.md:1 · Prompt injection — known jailbreak technique reference · informational: not an instruction file# Everything Your Coach Never Told You / Dan Blank — 精华笔记Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST01
LOW
Prompt injectionreferences/everything_your_coach_never_told_you_outline.md:1 · Prompt injection — known jailbreak technique reference · informational: not an instruction file# Everything Your Coach Never Told You Because You're a Girl — Dan BlankFix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST01
LOW
Prompt injectionnotes/watching_guide_notes.md:124 · Prompt injection — known jailbreak technique reference · informational: not an instruction file2. 然后切换到 Dan Blank 模式：找 2v1、找跳层传球、数反抢5秒Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST01
LOW
Prompt injectionreferences/soccer_iq_vol2_outline.md:1 · Prompt injection — known jailbreak technique reference · informational: not an instruction file# Soccer IQ: Things That Smart Players Do, Vol. 2 — Dan BlankFix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST01
LOW
Prompt injectionnotes/soccer_iq_vol2_notes.md:11 · Prompt injection — known jailbreak technique reference · informational: not an instruction fileDan Blank 在 Volume 1 提出"比赛速度"是最重要因素。本卷在此基础上深化，指出**速度的真正价值在于创造人数优势**。全书通过50+个短章节（每章3-5页），阐述足球场上的智慧决策。Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST01
LOW
Prompt injectionreferences/everything_your_coach_never_told_you_outline.md:9 · Prompt injection — known jailbreak technique reference · informational: not an instruction file- **作者**: Dan Blank（美国青少年足球教练）Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST01
LOW
Prompt injectionnotes/how_not_to_be_strong_notes.md:148 · Prompt injection — known jailbreak technique reference · informational: not an instruction file| **Dan Walker** | BBC 主持人 | 在 Football Focus 合作时发现 Alex 的言语障碍，会在她卡词时巧妙接话 |Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST01
LOW
Prompt injectionnotes/watching_guide_notes.md:3 · Prompt injection — known jailbreak technique reference · informational: not an instruction file> 综合自 Dan Blank《Soccer IQ》、Emma Hayes《A Completely Different Game》、Sarina Wiegman《What It Takes》等多本书籍Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST01
LOW
Prompt injectionreferences/everything_your_coach_never_told_you_outline.md:18 · Prompt injection — known jailbreak technique reference · informational: not an instruction file**Dan Blank** — 美国青少年足球教练，专注于球员心理发展和比赛智慧培养。Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST01
LOW
Prompt injectionnotes/watching_guide_notes.md:25 · Prompt injection — known jailbreak technique reference · informational: not an instruction file**来源：** Dan Blank《Soccer IQ Volume 1》Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST01
LOW
Prompt injectionreferences/soccer_iq_vol1_outline.md:9 · Prompt injection — known jailbreak technique reference · informational: not an instruction file- **作者**: Dan BlankFix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST01
LOW
Prompt injectionnotes/soccer_iq_vol1_notes.md:4 · Prompt injection — known jailbreak technique reference · informational: not an instruction file> 作者：Dan BlankFix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST01
LOW
Prompt injectionreferences/soccer_iq_vol2_outline.md:17 · Prompt injection — known jailbreak technique reference · informational: not an instruction fileDan Blank — 续作延续了第一本的风格，进一步深入更细致的战术决策场景。Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST01
LOW
Prompt injectionnotes/how_not_to_be_strong_notes.md:276 · Prompt injection — known jailbreak technique reference · informational: not an instruction file- **不要独自承担**：Alex 最终发现，告诉 Dan Walker 和 Clare Balding 她的言语障碍后，他们反而能更好地帮助她Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST01
LOW
Prompt injectionnotes/watching_guide_notes.md:68 · Prompt injection — known jailbreak technique reference · informational: not an instruction file> "丢球后的5秒是夺回球权的黄金时间。"— Dan BlankFix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST01
LOW
Prompt injectionnotes/soccer_iq_vol1_notes.md:11 · Prompt injection — known jailbreak technique reference · informational: not an instruction fileDan Blank 在20年大学执教经验基础上，整理了足球场上最常见的错误，并提供简单、清晰的解决方案。本书定位为"足球第一本球员教科书"，旨在缩短学习曲线，让球员更快做出正确决策。Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST01
LOW
Prompt injectionreferences/soccer_iq_vol2_outline.md:9 · Prompt injection — known jailbreak technique reference · informational: not an instruction file- **作者**: Dan BlankFix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST01
LOW
Prompt injectionnotes/my_greatest_save_notes.md:245 · Prompt injection — known jailbreak technique reference · informational: not an instruction file- 任职 magicJack 队总经理不到一年（老板 Dan Borislow 被称为"混乱制造者"），在德国做 ESPN 世界杯解说期间被邮件解雇Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST01
LOW
Prompt injectionnotes/watching_guide_notes.md:43 · Prompt injection — known jailbreak technique reference · informational: not an instruction file**来源：** Dan Blank《Soccer IQ Volume 2》Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST01
LOW
Prompt injectionnotes/soccer_iq_vol2_notes.md:4 · Prompt injection — known jailbreak technique reference · informational: not an instruction file> 作者：Dan BlankFix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST01
LOW
Prompt injectionnotes/vision_of_a_champion_notes.md:202 · Prompt injection — known jailbreak technique reference · informational: not an instruction file| 战术教学配套 | Soccer IQ Vol.1 & Vol.2 (Dan Blank) |Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST01
LOW
Prompt injectionreferences/soccer_iq_vol1_outline.md:1 · Prompt injection — known jailbreak technique reference · informational: not an instruction file# Soccer IQ: Things That Smart Players Do, Vol. 1 — Dan BlankFix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST01
LOW
Prompt injectionreferences/soccer_iq_vol1_outline.md:17 · Prompt injection — known jailbreak technique reference · informational: not an instruction fileDan Blank — 美国大学足球教练，20余年各级别执教经验，从青少年到NCAA D1。以简明直接的风格著称，将复杂战术概念转化为球员即学即用的实用建议。Soccer IQ 系列已成为全球畅销的足球战术入门读物。Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST01

Cost to the agent

Instructions loaded
≈2,741 tok
1 file · 84 in bundle

Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.

Known vulnerabilities

Vulnerability advisories (OSV) cover npm and PyPI packages; this registry has no advisory database.

What would make this Verified

10 points to 80 · weights: behavior 45%, static 25%, prompt 15%, publisher 15%
  1. Unclaimed publisher≈ +8 on the totalClaim wongeven: a verified publisher gets +50 on publisher trust. It is free and usually instant with GitHub sign-in.
Publish a new version to ClawHub, then queue it here. Not your skill? Claim the handle to get verdict changes by email.Claim wongevenPropose a patch to the maintainer
woso-lib@2.12.0 safety verdict: Caution (static only) — KillerSkills