装修全能体

• Outcome: Pass
• Latest audit: Sep 18, 2026 · 2:04 AM UTC
• Version: 8.0.0

Overview

This is a disclosed, document-only Chinese home-renovation reference skill with no code execution, network use, file access, persistence, or hidden data handling found.

Installers should understand this is a Chinese-language renovation knowledge base, not a licensed designer, inspector, lawyer, or environmental testing service. Use its measurements and contract checklists as reference guidance and verify site-specific construction, code, price, and legal decisions with qualified local professionals.

A.I.G

Vulnerability Patterns

• Skill Instruction Hijacking: Alters the agent's session goals or safety constraints when the skill loads
• Agent Memory Poisoning: Writes attacker-controlled rules into memory that affect later sessions
• Remote Payload Retrieval and Execution: Fetches external code whose behavior can change after review
• Embedded Malicious Code: Ships malicious scripts inside the skill and executes them locally
• Unauthorized Access and Privilege Escalation: Obtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (18)

Natural-Language Policy Violations

Medium

• Confidence: 91% confidence
• Finding: The skill name, description, triggers, workflow, and all examples are written entirely in Chinese, and nowhere in the markdown does it state that the skill supports multiple languages or lets the user opt into a language/locale. Under the policy, a skill that effectively requires a specific language without user choice is a natural-language policy violation unless the locale constraint is clearly documented and justified.

Ae4

Medium

• Category: analysis-evasion
• Confidence: 80% confidence
• Finding: Suspicious Unicode normalization or mixed-script content

Natural-Language Policy Violations

Medium

• Confidence: 93% confidence
• Finding: The entire skill file is written only in Chinese and provides no indication that users may choose another language or locale. Under the stated policy, a skill that effectively requires a specific language without opt-in is a natural-language policy violation unless the locale restriction is explicitly documented and justified.

Natural-Language Policy Violations

Medium

• Confidence: 88% confidence
• Finding: The manifest declares the display name as Chinese and provides the user-facing description entirely in Chinese, with no indication that users may choose another language or that the skill is intentionally limited to Chinese-speaking users. Under the policy, forcing a specific language without opt-in is a natural-language policy violation unless the locale constraint is explicitly documented and justified.

Natural-Language Policy Violations

Medium

• Confidence: 97% confidence
• Finding: The entire skill file is written in Chinese and provides no indication that language selection is optional or that the skill is limited to Chinese-speaking users. Under the policy rule, forcing a specific language without user opt-in is a natural-language policy violation unless the locale constraint is clearly documented and justified.

Natural-Language Policy Violations

Medium

• Confidence: 84% confidence
• Finding: The file title and all instructional content are written entirely in Chinese, and there is no indication that the skill supports other languages or that Chinese is a required locale for a region-specific use case. Under the policy rule, a skill that effectively forces a specific language without opt-in can be a natural-language policy violation.

Ae4

Medium

• Category: analysis-evasion
• Confidence: 80% confidence
• Finding: Suspicious Unicode normalization or mixed-script content

Natural-Language Policy Violations

Medium

• Confidence: 96% confidence
• Finding: The file title and all instructional content are written in Chinese, and the document later states the environment lacks Chinese OCR support, indicating an implicit Chinese-language constraint. There is no natural-language notice that the skill is Chinese-only, no user opt-in for language, and no alternative locale handling.

Vague Triggers

Medium

• Confidence: 92% confidence
• Finding: The trigger phrase "任何需要通行/操作的空间" is very broad and can activate in many ordinary design conversations outside the intended narrow use of corridor-width guidance. In a general home-renovation skill, this can cause over-triggering and retrieval of mismatched guidance, reducing precision and potentially leading users to apply generic constraints in contexts that need more specific rules.

Vague Triggers

Medium

• Confidence: 90% confidence
• Finding: The phrase "做采购表" is highly generic and overlaps with common planning language that could appear in many renovation or even broader household-organizing contexts. This makes the unit easy to invoke unintentionally, which can surface sequencing advice when the user may not actually be asking about material-order dependencies.

Vague Triggers

Medium

• Confidence: 88% confidence
• Finding: The trigger "定灯光方案" is broad and could match a wide range of lighting discussions, not just the specific knowledge about color temperature bands. In this skill context, overbroad activation is more of a quality and scope-control problem than a direct security issue, but it can still cause incorrect or premature advice selection.

Natural-Language Policy Violations

Low

• Confidence: 84% confidence
• Finding: The entire skill is written only in Chinese and provides no indication that users may choose another language or that the skill is intentionally limited to a Chinese-speaking or China-specific audience. Under the stated policy, forcing a specific language without user opt-in can be a natural-language policy violation.

Natural-Language Policy Violations

Low

• Confidence: 90% confidence
• Finding: This markdown file contains user-facing instructions exclusively in Chinese and does not indicate that the language is optional or region-specific. Under the policy rule for language or locale constraints, this can be a natural-language policy violation when no user opt-in or justification is provided.

Natural-Language Policy Violations

Low

• Confidence: 93% confidence
• Finding: This markdown file contains user-facing instructions only in Chinese, and it does not indicate that the skill is intended exclusively for a Chinese-speaking audience or provide any language/locale opt-in. Under the stated policy, forcing a specific language without user choice can be a natural-language policy violation.

Natural-Language Policy Violations

Low

• Confidence: 91% confidence
• Finding: This markdown file contains end-user instructional content exclusively in Chinese, and nowhere indicates that the skill is region-specific or that users may choose another language. Under the policy, forcing a specific language without opt-in is a natural-language policy concern.

Natural-Language Policy Violations

Low

• Confidence: 79% confidence
• Finding: This lineage manifest uses Chinese throughout titles, notes, and operational descriptions, but does not state that the skill is China-specific or that users can choose another language. Under the policy, forcing a specific language without opt-in can be a natural-language policy concern.

Natural-Language Policy Violations

Low

• Confidence: 98% confidence
• Finding: This markdown file is natural-language instructional content, and it consistently forces a single language/locale throughout the skill. Under the policy, language constraints should either be user-selectable or explicitly justified as region-specific; neither is stated here.

Natural-Language Policy Violations

Low

• Confidence: 94% confidence
• Finding: The skill content is entirely written in Chinese and the title explicitly presents the knowledge base in that language, with no indication that other languages are supported or that the user can opt into a preferred locale. Under the stated policy, forcing a specific language without user opt-in is a natural-language policy concern.

Static analysis

No suspicious patterns detected.