Security audit

jiadian-bikeng-zhinan

Security checks for vulnerabilities and agentic risk

Overview

This is a Chinese appliance and renovation-advice skill with no executable code, but parts of its reference content normalize risky structural changes and unsafe appliance uses beyond its stated scope.

Install only if you want Chinese-language home appliance and renovation reference material, and treat structural, gas, electrical, waterproofing, and nonstandard appliance-use advice as discussion prompts rather than instructions. Users should rely on licensed professionals, manufacturer manuals, property approval, and local code before acting on any renovation or appliance-installation suggestion.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (189)

Intent-Code Divergence

High

Category: Not specified by scanner
Confidence: 97% confidence
Finding: The article begins with a clear warning not to alter load-bearing walls, but later includes a recommended related case explicitly stating that a renovation 'directly knocked down a load-bearing wall.' In a home-renovation guidance skill, surfacing or recommending such content can normalize extremely dangerous structural work and may lead users to imitate it, risking collapse, injury, and legal violations.
Content: No source excerpt is available for this finding.

Missing User Warnings

High

Category: Not specified by scanner
Confidence: 98% confidence
Finding: Suggesting that users can 'open a new window' to solve poor lighting is potentially dangerous because creating a new opening can affect structural integrity, waterproofing, fire safety, and facade regulations. In this skill’s context, the advice is also out of scope for appliance guidance, making it more likely to be surfaced without the specialized safeguards such content requires.
Content: No source excerpt is available for this finding.

Description-Behavior Mismatch

High

Category: Not specified by scanner
Confidence: 99% confidence
Finding: The file content is materially out of scope for the declared skill purpose: it focuses on selecting装修公司/工头 and broader装修避坑, while the skill is presented as a 家电避坑指南. This mismatch can cause the agent to retrieve and present irrelevant or misleading guidance, increasing the chance of unsafe or poor user decisions because users may trust the skill to answer appliance-specific questions with unrelated renovation-contractor advice.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 87% confidence
Finding: SQP-3 applies to all file types and covers language or locale policy violations. This markdown content forces a single language for the skill content with no user opt-in, alternative locale, or explicit justification that it is intended only for a Chinese-speaking or region-specific audience.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 94% confidence
Finding: The file contains user-facing natural-language content only in Chinese, and there is no statement that the skill supports multiple languages or that Chinese is required for a justified region-specific purpose. Under the language/locale policy rule, forcing a specific language without user opt-in is a policy concern.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 96% confidence
Finding: The entire skill file is written in Chinese and does not offer any language or locale choice to the user. Under the policy rules, forcing a specific language without user opt-in is a natural-language policy violation unless the locale restriction is clearly documented and justified, which is not present here.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 96% confidence
Finding: This file consists entirely of Chinese-language natural-language content and does not indicate that the user can choose another language or that the skill is intentionally limited to a Chinese-speaking or region-specific audience. Under the stated policy, forcing a specific language without user opt-in is a natural-language policy violation.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 90% confidence
Finding: The entire document is written in Chinese and provides no indication that users may choose another language or locale. Under the stated policy, forcing a specific language without user opt-in is a natural-language policy violation unless the locale constraint is explicitly documented and justified.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 94% confidence
Finding: The entire skill content is written exclusively in Chinese and provides no indication that language selection is optional or constrained for a region-specific purpose. Under the policy, forcing a specific language without user opt-in is a natural-language policy violation.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 91% confidence
Finding: This markdown file presents all instructional content exclusively in Chinese and does not indicate any option for other languages or user selection. Under the stated policy, forcing a specific language without user opt-in is a natural-language policy violation.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 92% confidence
Finding: The entire skill content is presented only in Chinese, with no indication that other languages are supported or that the user can opt into this locale. Under the policy for natural-language violations, a skill that forces a specific language without user choice should be flagged unless the locale constraint is explicitly justified.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 93% confidence
Finding: This markdown file presents all user-facing content exclusively in Chinese and does not indicate that the user can choose another language or locale. Under the stated policy, forcing a specific language without user opt-in is a natural-language policy violation.
Content: No source excerpt is available for this finding.

Missing User Warnings

Medium

Category: Not specified by scanner
Confidence: 91% confidence
Finding: The content gives numerous actionable renovation ideas for repurposing air-conditioner exterior unit spaces, including wall removal, enclosure, masonry, glazing, and conversion to living/storage uses. Although it includes an initial warning, the body repeatedly normalizes structural alteration and exterior-space conversion without consistently reinforcing legal, structural, waterproofing, ventilation, fire-safety, and property-management constraints, which could encourage unsafe DIY or noncompliant construction.
Content: No source excerpt is available for this finding.

Missing User Warnings

Medium

Category: Not specified by scanner
Confidence: 95% confidence
Finding: The content repeatedly encourages using a dishwasher to wash produce, seafood, toys, fan parts, oil-laden range hood filters, hats, lamp crystals, and mahjong tiles, while providing only scattered caveats and in some cases suggesting adding dish soap during produce washing. This creates real hygiene, contamination, material-damage, and food-safety risks because residues, debris, grease, coatings, and non-food-contact contaminants can remain in the appliance or transfer onto later loads of dishes or food items.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 98% confidence
Finding: The entire skill content is presented only in Chinese, with no indication that the user can choose another language or that the skill is specifically limited to a Chinese-speaking or region-specific context. This creates a natural-language locale constraint without opt-in, which matches the policy-violation criterion for forced language or locale.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 97% confidence
Finding: The entire skill file is written only in Chinese and provides no indication that users can choose another language or that the locale is intentionally limited for a region-specific use case. Under the policy rule, a skill that implicitly forces a specific language without user opt-in is a natural-language policy concern.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 89% confidence
Finding: The document is entirely written in Chinese and provides no indication that language choice is optional or that the content is intended only for a Chinese-speaking or region-specific audience. Under the stated policy, forcing a specific language without user opt-in can be a natural-language policy violation.
Content: No source excerpt is available for this finding.

Missing User Warnings

Medium

Category: Not specified by scanner
Confidence: 92% confidence
Finding: The article includes affirmative guidance to remove balcony wall sections and enlarge space, which can normalize or encourage structural demolition by readers. Although there is an opening safety disclaimer, the actionable body text does not consistently repeat the constraint that only non-load-bearing elements may be altered after professional structural review and approval, creating a real risk of unsafe misapplication.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 96% confidence
Finding: This markdown file uses only Chinese-language natural-language content and does not indicate that the skill is region-specific or that users may choose another language. Under the policy check for language or locale constraints, forcing a single language without opt-in is a natural-language policy violation.
Content: No source excerpt is available for this finding.

Missing User Warnings

Medium

Category: Not specified by scanner
Confidence: 96% confidence
Finding: The content repeatedly recommends or normalizes 'removing all walls' and 'smashing all balcony walls' as a design solution, while only giving a brief upfront warning. In a home-improvement skill, users may treat these examples as actionable guidance, and the repeated permissive phrasing can encourage unsafe or non-compliant demolition of structural, seismic, or facade-related elements, creating real risk of collapse, injury, or illegal construction.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 91% confidence
Finding: The file presents all user-facing natural-language content exclusively in Chinese and does not indicate that language selection is optional or region-limited. Under the stated policy, forcing a specific language without user opt-in is a natural-language policy violation.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 98% confidence
Finding: The entire skill content is written in Chinese and provides no indication that language choice is optional or configurable. Under the language/locale policy rule, forcing a specific language without user opt-in is a natural-language policy violation.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 98% confidence
Finding: The entire file is written in Chinese and provides no indication that language is optional, selectable, or limited to a China-specific audience. Under the stated policy, forcing a specific language without user opt-in is a natural-language policy violation.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 83% confidence
Finding: This markdown file contains user-facing natural-language content only in Chinese, which can constitute a language/locale policy issue when no opt-in, translation option, or justification is provided. The policy specifically allows locale constraints only when they are documented and justified, which is not present here.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 89% confidence
Finding: The entire skill content is written only in Chinese and provides no indication that users may choose another language or that the locale restriction is intentional and justified. Under the policy for natural-language violations, forcing a specific language without user opt-in should be flagged.
Content: No source excerpt is available for this finding.