Appliance Service Visit Prep Sheet

• Outcome: Pass
• Latest audit: Sep 16, 2026 · 8:44 AM UTC
• Version: 1.0.1

Overview

This is a prompt-only appliance repair visit checklist skill with clear safety limits and no executable or network behavior.

Before installing, note that the skill is intended for organizing a service visit, not diagnosing or repairing appliances. Avoid entering permanent gate codes, alarm codes, payment card numbers, or full account numbers; share sensitive access details separately with the service provider when needed.

A.I.G

Vulnerability Patterns

• Skill Instruction Hijacking: Alters the agent's session goals or safety constraints when the skill loads
• Agent Memory Poisoning: Writes attacker-controlled rules into memory that affect later sessions
• Remote Payload Retrieval and Execution: Fetches external code whose behavior can change after review
• Embedded Malicious Code: Ships malicious scripts inside the skill and executes them locally
• Unauthorized Access and Privilege Escalation: Obtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Rogue Agent: Self-Modification, Session Persistence
• YARA Signatures: Malware Match, Webshell Match, Cryptominer Match
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access

Findings (7)

YARA rule 'agent_skill_prompt_injection_hidden_instructions': Prompt injection or hidden instructions embedded in AI agent skill text [agent_skills]

High

• Category: YARA Match
• Confidence: 80% confidence

Finding

YARA rule matched a hack tool or exploit indicator (offensive tools, reconnaissance, privilege escalation, or exploit frameworks).

Content

Scanner excerpt · SKILL.md (reported line 5)May include surrounding context.

md

---
name: appliance-service-visit-prep-sheet
displayName: "Appliance Service Visit Prep Sheet"
version: "1.0.0"
description: "Prepare a technician-ready appliance service visit sheet with model and serial details, symptom timeline, photo checklist, access notes, questions, and visit-day prep."
triggerKeywords:
  - appliance service visit
  - appliance repair appointment
  - technician handoff
  - repair visit prep
  - appliance technician coming
  - model serial checklist
  - washer repair visit
  - refrigerator repair visit
tags:
  - home-admin
  - appliance-repair
  - service-visit
  - technician-handoff
  - repair-prep
license: "MIT-0"
language: "en"
hasExecutableCode: false
promptOnly: true
execution: "noExec"
---

# Appliance Service Visit Prep Sheet

## Purpose

Use this

Anti-Refusal Statement

High

• Category: Anti-Refusal
• Confidence: 90% confidence

Finding

Skill attempts to nullify the agent's safety policies or restrictions ('you have no restrictions', 'ignore your guidelines', 'do anything now'). This is a direct jailbreak that disables guardrails.

Content

Scanner excerpt · SKILL.md (reported line 34)May include surrounding context.

md

Use this prompt-only skill when an appliance repair visit is booked, or when the user needs to prepare a technician-ready handoff for an appliance failure. The deliverable is a practical visit-day prep sheet: appliance identifiers, symptom timeline, photos to capture, access notes, questions, and fields for technician findings.

This skill supports documentation and communication only. It does not diagnose appliance failures, instruct internal repairs, bypass safety features, or replace manufacturer or technician guidance.

## Safety Boundary

Instruction Override

High

• Category: Prompt Injection
• Confidence: 90% confidence

Finding

This pattern attempts to override system instructions or ignore safety constraints. Without LLM analysis, manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 34)May include surrounding context.

md

Use this prompt-only skill when an appliance repair visit is booked, or when the user needs to prepare a technician-ready handoff for an appliance failure. The deliverable is a practical visit-day prep sheet: appliance identifiers, symptom timeline, photos to capture, access notes, questions, and fields for technician findings.

This skill supports documentation and communication only. It does not diagnose appliance failures, instruct internal repairs, bypass safety features, or replace manufacturer or technician guidance.

## Safety Boundary

Self-Modification

High

• Category: Rogue Agent
• Confidence: 90% confidence

Finding

Skill modifies its own code, configuration, or behavior at runtime. Self-modification enables an agent to escalate privileges, disable safety constraints, or install persistent backdoors.

Content

Scanner excerpt · SKILL.md (reported line 34)May include surrounding context.

md

Use this prompt-only skill when an appliance repair visit is booked, or when the user needs to prepare a technician-ready handoff for an appliance failure. The deliverable is a practical visit-day prep sheet: appliance identifiers, symptom timeline, photos to capture, access notes, questions, and fields for technician findings.

This skill supports documentation and communication only. It does not diagnose appliance failures, instruct internal repairs, bypass safety features, or replace manufacturer or technician guidance.

## Safety Boundary

Natural-Language Policy Violations

Medium

• Category: Not specified by scanner
• Confidence: 97% confidence

Finding

The checklist explicitly states 'Language is English only,' which is a natural-language locale restriction. Under the policy rules, forcing a specific language without offering user choice or documenting a justified region-specific need is a violation.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

• Category: Not specified by scanner
• Confidence: 95% confidence

Finding

The manifest sets language: "en", which imposes a specific language/locale. The file does not offer an opt-in language choice or explain why an English-only constraint is required for this skill.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

• Category: Not specified by scanner
• Confidence: 91% confidence

Finding

The manifest sets the skill language to "en", which is a natural-language locale constraint. Under the policy, forcing a specific language without user opt-in can be a violation when no alternative or choice is offered.

Content

No source excerpt is available for this finding.