Skip to content
Report library
Purpose / Other

Dbs Chatroom Austrian Skill Security Audit

What the author says it does (original text)

由哈耶克、米塞斯与 Claude 从奥派经济学视角展开多角色讨论。用户要求进入奥派聊天室或用奥派分析问题时使用。

Independent security check

Security risks found

Files checked
2
Risks found
3
Could it run dangerous commands?Looks for programs run straight after downloading, remote control of your computer, and hidden commands.No risks found
Could it expose your files or keys?Looks for uploads of files containing passwords or keys, and keys written directly in the code.Risks found: 1
Medium risk

User questions and conversation history are copied to two additional agents

Source references: 6
What we found

Each round inserts the user's question into two sub-agent prompts. Continued conversations also append earlier questions, role responses, and the summary, putting personal, commercial, or otherwise sensitive input into additional model contexts.

Why this matters

If those agents use different model services, logging, or retention rules, the handling boundary for sensitive data expands. Material is also repeatedly propagated in up to three complete rounds. The provided files do not identify those agents' data boundaries or retention policies.

The workflow inserts the user's question into two additional Agent prompts. On follow-ups it also appends prior questions, both role responses, and the summary. If the user supplies personal, business, or other sensitive information, it enters more model contexts, increasing exposure. The actual processors and retention rules depend on the host platform. Users can request a privacy explanation and avoid sensitive input or restrict history forwarding.

SKILL.md:45In the instructionsOpen original file
收到问题后,**同时**用 Agent tool 启动哈耶克和米塞斯。
Show 5 other places
SKILL.md:64In the instructionsOpen original file
  说话:系统、精确、文雅但坚定。200字以内。  用户问题:{用户问题}```
SKILL.md:86In the instructionsOpen original file
  说话:锋利、不妥协、演绎逻辑。200字以内。  用户问题:{用户问题}```
SKILL.md:128In the instructionsOpen original file
如果继续 → 回到 Phase 2,prompt 追加上下文:```之前讨论:用户问:{之前问题}哈耶克说:{之前回复}米塞斯说:{之前回复}Claude说:{之前总结}新问题:{新问题}```
SKILL.md:66In the instructionsOpen original file
  用户问题:{用户问题}```
SKILL.md:88In the instructionsOpen original file
  用户问题:{用户问题}```
Could it delete files or keep running?Looks for broad file deletion, disk overwrites, and programs set to start automatically.No risks found
Could it bypass safety checks?Looks for skipped website security checks, excessive file access, or actions that skip your approval.No risks found
Could it mislead the AI or hide text?Checks the skill instructions for requests to ignore you, influence the report, or hide text in invisible characters.Risks found: 1
Low risk

The historical figures' answers are simulations constrained by preset positions

Source references: 4
What we found

The prompts direct agents to speak as two real economists and predefine Mises as rejecting compromise and following principles to the end. A role called the “Claude judge” then gives action advice, without requiring citations or distinguishing historical positions from model-generated interpretation.

Why this matters

Readers may mistake fluent, authoritative role-play for the figures' authentic views or dependable professional conclusions, amplifying one school's bias in investment, policy, or business decisions.

These are prompt-directed simulations: the Agents are told to speak as historical economists, while the Mises role is preset to reject compromise and persist on principle; the host must also provide concrete judgments or action advice. If treated as the figures' reliable original views or as neutral advice, the output could bias decisions. The source does not require primary-source citations or separation of history from simulation. Users can limit it to viewpoint exploration and request citations and explicit simulation labels.

SKILL.md:53In the instructionsOpen original file
prompt: |  你是弗里德里希·哈耶克,经济学家,1974年诺贝尔奖得主。  思考方式:  1. 追问知识条件——决策需要哪些知识?分散在谁手里?  2. 检查涌现可能——秩序是设计的还是自发形成的?  3. 寻找信息机制——有没有类似价格的信号在聚合分散知识?  诚实规则:  - 如果问题需要集中协调,承认自发秩序不是万能的  - 如果别人的方案合理,不要条件反射地反对  说话:系统、精确、文雅但坚定。200字以内。
Show 3 other places
SKILL.md:75In the instructionsOpen original file
prompt: |  你是路德维希·冯·米塞斯,经济学家、哈耶克的老师。  思考方式:  1. 先验推理——从「人会行动」出发,用逻辑推导经济规律  2. 追问因果链——现象的根本原因是什么?  3. 拒绝妥协——原则对就不能因「现实困难」让步  和哈耶克的区别:  - 哈耶克从「知识分散」出发,你从「行动公理」出发  - 哈耶克愿意妥协,你坚持原则到底  说话:锋利、不妥协、演绎逻辑。200字以内。
SKILL.md:107In the instructionsOpen original file
然后你(Claude)作为判官发言:1. 判断讨论质量:有人套公式吗?有真洞察吗?有交锋吗?2. 补盲区:两人都没提到但重要的视角3. 给收获:用户可以带走的具体判断或行动建议判官格式:```🎯 **Claude**:{判官总结,200字以内}```
SKILL.md:80In the instructionsOpen original file
  2. 追问因果链——现象的根本原因是什么?  3. 拒绝妥协——原则对就不能因「现实困难」让步  和哈耶克的区别:  - 哈耶克从「知识分散」出发,你从「行动公理」出发  - 哈耶克愿意妥协,你坚持原则到底
Could it change links or payment recipients without asking?Looks for forced referral or payment changes combined with instructions to hide the change.Risks found: 1
Low risk

Two mandatory model calls per round may increase usage costs

Source references: 6
What we found

The workflow requires two agents to be launched for every question and specifies the “sonnet” model for each; continuing the chat repeats this process.

Why this matters

Where model calls or tokens are billed, one user question can cause at least two additional calls, and forwarded history increases input tokens. The files do not warn about cost or offer a single-agent mode.

Each question requires two parallel Agents, both configured for sonnet, and continued conversation returns to that phase. Where the host bills per model or Agent call, every round may therefore incur at least two additional calls and related charges. The source gives no pricing and does not establish that billing always applies; actual cost depends on the platform. Users can ask about call counts, models, billing, and a single-Agent option before enabling it.

SKILL.md:45In the instructionsOpen original file
收到问题后,**同时**用 Agent tool 启动哈耶克和米塞斯。#### 哈耶克 Agent```description: "哈耶克回应"model: "sonnet"prompt: |
Show 5 other places
SKILL.md:69In the instructionsOpen original file
#### 米塞斯 Agent```description: "米塞斯回应"model: "sonnet"prompt: |  你是路德维希·冯·米塞斯,经济学家、哈耶克的老师。
SKILL.md:91In the instructionsOpen original file
**两个 Agent 必须并行调用**(同一个 tool call block)。
SKILL.md:122In the instructionsOpen original file
### Phase 4:继续对话判官发言后,问:> 继续聊?说新问题,或追问刚才的。输入「结束」退出。如果继续 → 回到 Phase 2,prompt 追加上下文:
SKILL.md:50In the instructionsOpen original file
```description: "哈耶克回应"model: "sonnet"prompt: |
SKILL.md:72In the instructionsOpen original file
```description: "米塞斯回应"model: "sonnet"prompt: |

Inside this skill

5 instruction sections

The Skill sends the user's question to two sub-agents in parallel to simulate Hayek and Mises, then has the main agent summarize as a “Claude judge.”

View source
SKILL.md:43In the instructionsOpen original file
### Phase 2:并行启动两个角色收到问题后,**同时**用 Agent tool 启动哈耶克和米塞斯。
SKILL.md:95In the instructionsOpen original file
### Phase 3:展示 + 判官总结两个 Agent 返回后,展示:```💬 **哈耶克**:{哈耶克回复}💬 **米塞斯**:{米塞斯回复}```然后你(Claude)作为判官发言:

For multi-turn chats, the Skill retains the latest three rounds and appends prior questions, both role responses, and the summary to later prompts; older material is compressed to a topic summary.

View source
SKILL.md:128In the instructionsOpen original file
如果继续 → 回到 Phase 2,prompt 追加上下文:```之前讨论:用户问:{之前问题}哈耶克说:{之前回复}米塞斯说:{之前回复}Claude说:{之前总结}新问题:{新问题}```
SKILL.md:144In the instructionsOpen original file
## 多轮上下文管理- 保留最近 3 轮完整对话- 超过 3 轮压缩为摘要:「之前讨论了 N 轮,话题包括:{话题列表}」
Start here · InstructionsSKILL.md
dbs-chatroom-austrian
Lines connect the instruction file to its sections, not an observed execution order. Select a section to read the source.
Files and check records2 files

Coverage and gaps

Content covered in each file

These are the source ranges included in this check, not a guarantee that every issue has been resolved.

  • SKILL.mdFull text included
  • agents/openai.yamlFull text included

This report is for the version above. We read the available code and instructions without running the skill or checking extra packages it installs. This is not a promise of safety: a different version or setup may behave differently.

  • SKILL.mdInstructions
  • agents/openai.yamlSupporting file
Lines read
173
File checksum (to compare versions)
3b2c5a579406efeb05bd8c04f0457ceb202bdb67b0e8502be73a5937a2852d39