瓦匠

• Outcome: Pass
• Latest audit: Jun 6, 2026 at 10:13 AM UTC
• Version:
  1.0.0

Overview

This appears to be a tile or renovation guidance skill with an over-broad trigger list, but no evidence of hidden code, credential access, persistence, or harmful behavior.

Safe to install for tile or masonry help. Be aware that it may activate on generic renovation wording; confirm the task is actually tile-related before following specialized guidance, especially for waterproofing, drainage, or structural work.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

• Confidence: 89% confidence
• Finding: The trigger list is broad enough to activate on generic renovation terms such as waterproofing, leveling, drains, corners, and material names that may arise outside a tile-mason context. This can cause the skill to intercept unrelated user requests and steer responses into domain-specific guidance or script-driven cost estimation when another skill or safer general handling would be more appropriate.

VirusTotal

65/65 vendors flagged this skill as clean.