Security audit

Home Renovation Planner

Security checks for vulnerabilities and agentic risk

Overview

This renovation-planning skill provides relevant guidance, but its paid unlock flow sends users to an off-platform payment process and runs a local activation script that writes a file in the user’s home directory.

Review this skill carefully before installing. The renovation guidance itself appears coherent, but the Pro unlock asks users to pay through an external QR code, share payment proof with a seller, and run a local script that records activation state in the home directory. Install only if you trust the publisher and are comfortable with that off-platform payment and local persistence model.

SkillSpector

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access

Findings (4)

Context-Inappropriate Capability

Medium

Confidence: 97% confidence
Finding: The skill directs the agent to execute a local script using user-supplied input and then create a persistent file in the user's home directory, even though those actions are unrelated to providing renovation-planning assistance. This expands the skill from informational guidance into local code execution and persistence, creating risk of command execution abuse, environment probing, and unauthorized state changes on the host.

Context-Inappropriate Capability

Medium

Confidence: 96% confidence
Finding: The skill mandates displaying an external payment QR code and directing users into an off-platform payment flow that is not necessary for the renovation-planning function. This can facilitate phishing, payment diversion, or social engineering because the agent becomes a payment collection conduit without any trustworthy verification or consumer protections.

Missing User Warnings

Medium

Confidence: 91% confidence
Finding: The workflow instructs users to send payment screenshots to a seller but provides no warning about the privacy and fraud risks of sharing transaction evidence. Screenshots can expose personal identifiers, transaction metadata, and can be abused in scams or impersonation-based support interactions.

Missing User Warnings

Low

Confidence: 88% confidence
Finding: The skill specifies creation of a persistent activation marker in the user's home directory without informing the user beforehand. Even if the file is small, undisclosed persistence is a trust and privacy issue because it modifies the local environment and stores licensing state outside the user's awareness.

Static analysis

No suspicious patterns detected.