Basic Masonry

Security checks across malware telemetry and agentic risk

Overview

This is a normal masonry advice skill with no executable behavior, but it contains a concrete DIY safety issue that users should review before relying on it.

Review this skill before installing or following it. Do not use used motor oil on concrete forms; use a commercial concrete form-release product or manufacturer-approved safer alternative. For grinding, cutting, or demolition, use proper silica dust controls, eye protection, and a properly fitted respirator, and get professional help for structural cracks, tall retaining walls, or permit-sensitive work.

SkillSpector

By NVIDIA

Vulnerability Patterns

Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (2)

Missing User Warnings

Medium

Confidence: 97% confidence
Finding: The guidance suggests using used motor oil as a form-release agent, which is unsafe because waste oil can contain toxic contaminants and can pollute soil or nearby surfaces. In a DIY home-improvement context, users may copy this literally, creating environmental, health, and potentially code/compliance issues without realizing safer commercial alternatives exist.

Missing User Warnings

Medium

Confidence: 91% confidence
Finding: The repointing guidance tells users to grind out old mortar but does not warn that grinding masonry can generate respirable crystalline silica, a serious inhalation hazard. Because this skill is aimed at homeowners and beginners, omission of explicit PPE and dust-control guidance materially increases the chance of unsafe execution.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal