Generator Buying C onsultant

• Outcome: Pass
• Latest audit: Sep 16, 2026 · 8:24 AM UTC
• Version: 1.0.0

Overview

This is an instruction-only generator buying guide that asks relevant sizing questions and does not add hidden execution, persistence, credentials, or file access.

This skill appears safe to install as a buying-consultation aid. Users should still verify current generator model availability, product specs, local electrical rules, and use a licensed electrician for transfer switch or panel work.

A.I.G

Vulnerability Patterns

• Skill Instruction Hijacking: Alters the agent's session goals or safety constraints when the skill loads
• Agent Memory Poisoning: Writes attacker-controlled rules into memory that affect later sessions
• Remote Payload Retrieval and Execution: Fetches external code whose behavior can change after review
• Embedded Malicious Code: Ships malicious scripts inside the skill and executes them locally
• Unauthorized Access and Privilege Escalation: Obtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (4)

Whitespace Padding

Medium

• Category: Prompt Injection
• Confidence: 70% confidence

Finding

Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.

Content

Scanner excerpt · SKILL.md (reported line 226)May include surrounding context.

md

**Step 3.5 — Select Generator Type**

| Use case                           | Recommended type                                                    | Notes                                                                                                 |
| ---------------------------------- | ------------------------------------------------------------------- | ----------------------------------------------------------------------------------------------------- |
| Home backup, occasional outages    | Portable open-frame                                                 | Practical, widely available; must be run outdoors                                                     |
| Camping, RV, sensitive electronics | Portable inverter generator                                         | Low THD (< 3%) safe for laptops, medical equipment, phones; quieter; more fuel-efficient at low loads |

Whitespace Padding

Medium

• Category: Prompt Injection
• Confidence: 70% confidence

Finding

Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.

Content

Scanner excerpt · SKILL.md (reported line 244)May include surrounding context.

md

**Step 3.6 — Determine Fuel Type**

| Fuel                     | Characteristics                                                                                                                        | Best for                                             |
| ------------------------ | -------------------------------------------------------------------------------------------------------------------------------------- | ---------------------------------------------------- |
| Petrol / Gasoline        | Widely available; short shelf life (30–90 days without stabiliser); lower cost generators                                              | Short-duration portable backup; job sites            |
| Diesel                   | Better fuel efficiency at high loads; longer shelf life (6–12 months); engines more durable under continuous load; higher upfront cost | Extended run, heavy loads, construction              |

Autonomous Decision Making

Medium

• Category: Excessive Agency
• Confidence: 75% confidence

Finding

Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.

Content

Scanner excerpt · SKILL.md (reported line 285)May include surrounding context.

md

8. **Assuming a generator's rated wattage is its sustained capacity** — Many generators are rated at their peak output, which they can sustain for only seconds to minutes. The running (continuous/rated) wattage — which may be 10–15% lower — is the correct number for load sizing.

9. **Buying a small portable generator for whole-home backup without checking if it covers essential loads** — A 2,000W portable cannot power a central AC (3,000–5,000W) or an electric range. Buyers must map their essential loads before sizing.

---

Natural-Language Policy Violations

Low

• Category: Not specified by scanner
• Confidence: 0% confidence

Finding

After reviewing the markdown file, there are no confident natural-language policy violations. The instructions discuss region-aware electrical standards, not forced user language or locale. No other applicable category yields a genuine issue with sufficient confidence.

Content

No source excerpt is available for this finding.