ClawHub
Back to skill

Security audit

dryer-vent-fire-guard

Security checks for vulnerabilities and agentic risk

Overview

This offline dryer-audit skill needs review because its testing sequence and conflicting vent calculations could give unsafe advice.

Wait for corrected safety sequencing and vent-length instructions before relying on this skill. Do not perform its drying test when there is unexplained overheating, a burning smell or a previous thermal shutdown; arrange inspection before reuse. For suspected fire, leave and contact emergency services. Follow the appliance manual and use a qualified technician for gas-line work.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Output HandlingUnvalidated Output Injection, Cross-Context Output, Unbounded Output
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

The dry-time test lacks a stop-use warning for dryers showing signs of imminent fire risk.

High
Category
Output Handling
Confidence
98% confidence
Finding

The skill explicitly includes burning smells, excessive heat, and a prior thermal shutdown among its use cases, then directs users to run a heated dry-time test without first screening for immediate danger. Operating a potentially obstructed or overheating dryer for another full cycle can worsen an incipient lint fire; the fire-prevention context makes this omission especially consequential.

Content

No source excerpt is available for this finding.

Dryer servicing instructions omit electrical and gas safety precautions.

High
Category
Output Handling
Confidence
95% confidence
Finding

The walkthrough starts by telling users to pull the dryer, and the cleaning ladder recommends brushing, vacuuming, and replacing ductwork without requiring electrical isolation or precautions for a connected gas line. Moving a connected appliance can strain its gas connector, while servicing energized equipment creates shock and injury hazards; subsequent running checks are not clearly separated from servicing.

Content

No source excerpt is available for this finding.