ClawHub
Back to skill

Security audit

Rocket Mass Heater Construction

Security checks for vulnerabilities and agentic risk

Overview

This skill is a disclosed planning guide for a rocket mass heater, with real fire and carbon monoxide safety risks but no hidden code, credential use, or malicious behavior in the artifacts.

Install only if you intentionally want planning help for a rocket mass heater. Before following build-specific instructions, verify local fire and building codes, permits, insurance impact, chimney suitability, clearances, carbon monoxide protection, and whether a licensed HVAC, masonry, or structural professional should review the design.

SkillSpector

Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (1)

Vague Triggers

Medium
Confidence
93% confidence
Finding
The auto-trigger criteria are broad enough to activate on ordinary discussion of cold weather, wood heat, or fuel costs, which can cause the agent to enter a hazardous construction-planning workflow without clear user intent. In this skill, that is more dangerous than usual because it concerns designing and operating a combustion appliance with fire, carbon monoxide, code, and structural risks.

Static analysis

No suspicious patterns detected.