ClawHub
Back to skill

Security audit

Home Gym Flooring Buying Consultant

Security checks for vulnerabilities and agentic risk

Overview

This is a pure instruction-based home gym flooring buying guide with no code execution, data access, persistence, or hidden behaviors found.

Before relying on recommendations, verify current product specs, pricing, availability, indoor air-quality certifications, and building requirements yourself. The mismatched homepage URL is worth noting as a documentation quality issue, but the inspected skill content is coherent and low-risk.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Findings (4)

Vague Triggers

Medium
Confidence
95% confidence
Finding
The listed example invocations include generic phrases such as "help me choose gym flooring" and "best flooring for home gym," which are broad enough to match ordinary conversational requests beyond a narrowly defined skill trigger. Although the surrounding section gives use/not-use guidance, it does not provide tighter trigger constraints or negative examples for these phrases themselves.

Autonomous Decision Making

Medium
Category
Excessive Agency
Content
5. Assuming "rubber is rubber" — recycled crumb rubber and virgin rubber differ significantly in density, consistency, odor, and surface quality; the right choice depends on the use case
6. Skipping the 10% overage — trimming always creates waste; ordering to exact square footage guarantees running short
7. Skipping acoustic underlayment in multi-story buildings — rubber flooring alone may not meet IIC ≥ 50 requirements without a decoupling underlayment layer
8. Buying horse stall mats without checking indoor VOC certification — agricultural mats may off-gas rubber compounds; verify the product is approved for indoor use
9. Choosing a platform too small for Olympic lifting — a standard deadlift platform (72 inches / 6 ft) is insufficient for split jerks in Olympic lifting; minimum 8 ft × 8 ft is the professional standard

### Step 4 — Deliver the structured recommendation
Confidence
75% confidence
Finding
Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.

Missing User Warnings

Low
Confidence
79% confidence
Finding
This is a markdown file, so missing-warning review applies to user-affecting behaviours described in the README. The skill says it will suggest up to 5 real products tailored to the user's region, but does not warn users to verify availability, pricing, or suitability before purchase; given it explicitly positions itself as avoiding biased sales advice, a brief disclaimer would improve transparency for purchase-impacting recommendations.

Intent-Code Divergence

Low
Confidence
97% confidence
Finding
The file documents a 'Home Gym Flooring Buying Consultant', but the homepage URL points to a 'rowing-machine-buying-consultant' path. This is an active documentation contradiction rather than a mere omission, because it identifies the skill as one thing while linking to another skill's location.

Static analysis

No suspicious patterns detected.