Security audit

装修家电选购与安装

Security checks for vulnerabilities and agentic risk

Overview

ClawScan rates this skill benign with high confidence: it found no AIG security alerts, while Skillspector flagged four safety concerns in appliance installation advice.

The benign verdict addresses security behavior and does not mean the skill is risk-free. Before following its appliance advice, check the specific manufacturer’s installation and safety instructions; avoid touching operating equipment or blocking required airflow, and seek qualified help for servicing.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

Output HandlingUnvalidated Output Injection, Cross-Context Output, Unbounded Output
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (4)

L09–L10 recommend opening an operating air conditioner and touching outdoor-unit valves without relevant safety warnings.

High

Category: Output Handling
Confidence: 96% confidence
Finding: The text encourages homeowners to open an operating indoor unit and touch outdoor refrigerant valves without equipment-specific precautions. Depending on access and equipment design, this can expose users to hot or cold surfaces, electrical components, moving parts, or unsafe outdoor access; the general construction disclaimer does not address these hazards.
Content: No source excerpt is available for this finding.

L7 recommends gap-free refrigerator enclosure without warning that ventilation requirements remain model-specific.

Medium

Category: Output Handling
Confidence: 97% confidence
Finding: The advice treats bottom heat rejection as sufficient justification for a completely gap-free refrigerator enclosure, without requiring approval for the specific model. In this installation-advice context, readers could commission cabinetry that restricts required airflow, causing poor cooling, increased energy use, overheating, or premature equipment failure.
Content: No source excerpt is available for this finding.

L09–L14 recommend concealing wall-mounted air conditioners without warning about airflow and maintenance clearances.

Medium

Category: Output Handling
Confidence: 96% confidence
Finding: The concealment examples assert that louvers or an opened cabinet door will preserve normal operation without establishing adequate intake, discharge, or maintenance clearances. Readers following this installation guidance could obstruct airflow or create recirculation, leading to reduced performance, icing, condensate problems, and difficult servicing; the generic disclaimer does not resolve these design omissions.
Content: No source excerpt is available for this finding.

L17 recommends using a required refrigerator cooling gap for storage without warning against obstructing ventilation.

Medium

Category: Output Handling
Confidence: 98% confidence
Finding: The passage explicitly suggests using a gap needed for refrigerator heat dissipation as storage space. A magnetic rack and its contents can reduce that required clearance or obstruct ventilation, undermining the article's earlier recognition that cooling gaps must be preserved and potentially causing overheating or equipment damage.
Content: No source excerpt is available for this finding.