Building Code Egress Review

• Outcome: Review
• Latest audit: Sep 16, 2026 · 8:45 AM UTC
• Version: 0.1.2

Overview

The skill is a disclosed draft building-code review helper with no code-execution behavior, but it contains a core egress-width rule conflict that could produce unsafe draft compliance results.

Install only if you are prepared to correct and independently verify the egress-capacity factor instructions before relying on outputs. Treat all results as draft assistance for a registered design professional and AHJ review, not as compliance certification.

A.I.G

Vulnerability Patterns

• Insecure Skill Coding Practices: Finds exploitable flaws such as hardcoded secrets or command injection
• Skill Instruction Hijacking: Alters the agent's session goals or safety constraints when the skill loads
• Agent Memory Poisoning: Writes attacker-controlled rules into memory that affect later sessions
• Remote Payload Retrieval and Execution: Fetches external code whose behavior can change after review
• Embedded Malicious Code: Ships malicious scripts inside the skill and executes them locally

Findings (1)

T09 · Insecure Skill Coding Practices

Error

• Location: SKILL.md:94

Finding

Reversed sprinkler-dependent egress capacity factors can understate required exit width

Content

View full analysis

Vulnerability Details

File Location: SKILL.md, lines 94–95
Vulnerability Type: Safety-critical calculation logic error
Risk Level: High

markdown

- Stairways: **0.3 in/occupant** (sprinklered) or **0.2 in/occupant** (unsprinklered, for capacity reduction allowance).
- All other egress components (doors, corridors, ramps): **0.2 in/occupant** (sprinklered) or **0.15 in/occupant** (unsprinklered).

Technical Analysis

The instructions reverse the conditions under which the reduced IBC egress-capacity factors may be applied. The baseline factors under IBC §1005.3 are 0.3 inch per occupant for stairways and 0.2 inch per occupant for other egress components. The reduced factors of 0.2 and 0.15 inch per occupant are conditional allowances for qualifying sprinklered buildings with the required emergency voice/alarm communication coverage; they are not allowances for unsprinklered buildings.

Because the skill explicitly directs the agent to use the reduced factors for an unsprinklered building, generated exit-capacity calculations can systematically understate required widths. This is a safety-critical insecure configuration and validation flaw in the skill instructions.

Attack Path

1. A user supplies project data identifying a building as unsprinklered.
2. The agent follows SKILL.md and applies 0.2 inch per occupant to stairs and 0.15 inch per occupant to doors, corridors, or ramps.
3. The calculated minimum egress widths are lower than those obtained from the applicable baseline factors.
4. The resulting exit-capacity matrix may mark an undersized egress component as compliant.
5. If the draft is relied upon without independent correction by the registered design professional or Authority Having Jurisdiction, deficient dimensions may propagate into design or permit-review documents.

No system privileges, credentials, or execution capabilities can be obtained through this flaw. The affected scope i ...[truncated 975 chars]

Remediation

View remediation

Remediation Suggestions

1. Replace the affected instructions with the baseline factors:
   • Stairways: 0.3 inch per occupant.
   • Other egress components: 0.2 inch per occupant.
2. Permit the reduced 0.2/0.15 factors only after explicitly confirming every applicable condition in IBC §1005.3.1 and §1005.3.2, including qualifying sprinkler protection and emergency voice/alarm communication coverage.
3. If any prerequisite is unknown, use the baseline factors and mark the reduction as unresolved rather than assuming eligibility.
4. Add a calculation guard requiring the report to identify the selected factor, its code section, and the verified prerequisites for each component.
5. Add regression examples covering unsprinklered, NFPA 13, NFPA 13R, and unknown-protection cases. Unsprinklered and unknown cases must never receive sprinkler-dependent reductions.
6. Have the corrected language and numerical examples reviewed against the adopted IBC edition and local amendments by a qualified building-code professional.

SkillSpector

Vulnerability Patterns

• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep