Security audit

sump-pump-outage-planner

Security checks for vulnerabilities and agentic risk

Overview

This local flood-planning tool needs review because its troubleshooting advises reconnecting a potentially faulty pump to another circuit.

Have the electrical troubleshooting corrected before relying on this skill. Do not use its alternate-circuit workaround for a suspected ground fault; obtain qualified assessment and preserve GFCI protection. Follow manufacturer-approved float testing and avoid electrical work while standing in water. See [CDC flood electrical safety](https://www.cdc.gov/floods/safety/reentering-your-flooded-home-safety.html). Treat backup rankings as rough runtime estimates, not cost comparisons.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

Output HandlingUnvalidated Output Injection, Cross-Context Output, Unbounded Output
MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access

Findings (4)

Description-Behavior Mismatch

High

Category: MCP Tool Poisoning
Confidence: 98% confidence
Finding: Most functionality matches the declared sump-outage planning purpose. However, the backup comparison uses a materially different ranking criterion: estimated runtime rather than cost per hour of protection. Generator protection is fixed at 24 hours, water-powered protection is treated as unlimited when municipal water is indicated, and battery protection uses calculated runtime. No undeclared resource access or unrelated behavior is present.
Content: No source excerpt is available for this finding.

The hands-on float diagnostic lacks an electrical-shock warning for wet-basement conditions.

High

Category: Output Handling
Confidence: 98% confidence
Finding: The diagnostic instructs users to lift the float by hand to start an energized pump without electrical-safety precautions. In a wet basement with potentially faulty equipment, this can expose users to serious or fatal electric shock; the emergency context increases the likelihood of unsafe handling.
Content: No source excerpt is available for this finding.

Ground-fault troubleshooting instructs reconnecting a potentially faulty pump without an electrical-safety warning.

High

Category: Output Handling
Confidence: 100% confidence
Finding: The troubleshooting card identifies a possible pump ground fault and then recommends reconnecting the pump to another circuit as a stopgap. This may bypass functioning GFCI protection and re-energize defective equipment in a wet environment, creating a potentially fatal shock hazard rather than merely omitting a warning.
Content: No source excerpt is available for this finding.

Backup options are ranked by protection duration, not the manifest's promised cost per hour of protection.

Medium

Category: Excessive Agency
Confidence: 100% confidence
Finding: The manifest promises a cost-per-hour comparison of battery, generator, and water-powered backups. L134-L149 collect only protection hours, names, and notes, then sort by descending duration at L147; no costs are collected or calculated, so this ranking cannot identify the most cost-effective option.
Content: No source excerpt is available for this finding.