Security audit
Security checks for vulnerabilities and agentic risk
This offline roof-leak helper is mostly coherent, but parts of its DIY emergency and insurance-claim guidance need review because they could lead to unsafe repairs or incomplete disclosures.
Install only if you want offline roof-leak triage guidance and understand it is not a substitute for a roofer, electrician, remediation contractor, or accurate insurer reporting. Treat any wet electrical area, sagging ceiling, contaminated water, older building materials, suspected mold, steep/wet/night roof access, or respiratory-risk situation as a professional-help scenario. Report insurance facts accurately and keep photos, receipts, and timelines rather than relying on claim-optimizing wording.
The document tells users to 'release deliberately' when a ceiling bulge indicates pooled water, but it does not warn about shutting off power, avoiding collapse zones, or the risk of contaminated water discharge. In a DIY emergency context, that omission can lead users to stand under a weakened ceiling or contact energized wet materials, creating serious injury risk.
The instructions to pull wet insulation and open ceilings provide actionable demolition/drying steps without warning about live electrical wiring, legacy asbestos-containing materials, or contaminated water and mold exposure. Because the skill is written as practical homeowner guidance, users may follow it directly in unsafe conditions and expose themselves to shock, hazardous dust, or bioaerosols.
The US insurance guidance explicitly coaches the user to use insurer-favorable trigger language like 'Sudden' and to avoid volunteering potentially relevant history such as prior long-term dripping before claim classification. That crosses from neutral documentation advice into potentially misleading claim scripting, which could facilitate insurance fraud or materially deceptive reporting.
