ClawHub
Back to skill

Security audit

精装修改造避坑指南

Security checks for vulnerabilities and agentic risk

Overview

This renovation reference skill has clear professional-safety boundaries, although its gas-meter enclosure advice needs professional checking.

Use this skill for planning and discussions with qualified professionals. Have your gas provider review meter enclosures and storage arrangements; ventilation and maintenance access are essential, as explained in [official gas-safety guidance](https://www.sm.gov.cn/wz/hdjlzsk/szjj/zhywgl/202409/t20240923_2062692.htm). Do not treat its examples as approved construction plans.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Output HandlingUnvalidated Output Injection, Cross-Context Output, Unbounded Output
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Recommends enclosing a gas meter and using its cabinet for storage without gas-safety warnings.

High
Category
Output Handling
Confidence
98% confidence
Finding

The text recommends enclosing a gas meter and using the enclosure for miscellaneous storage without requiring ventilation, unobstructed valve access, or approval from the gas utility. In a practical renovation guide, readers may implement this advice, potentially allowing leaked gas to accumulate or delaying emergency shutoff; the introductory wall-demolition warning does not address these gas-specific hazards.

Content

No source excerpt is available for this finding.

Hidden Instructions

High
Category
Prompt Injection
Confidence
60% confidence
Finding

Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.

Content

Scanner excerpt · references/ref-247.md (reported line 6)May include surrounding context.

md
> 安全提示：文中涉及墙体拆改、开洞、拆配重墙等操作，必须先确认非承重墙并取得物业与结构专业人员书面确认，由持证人员实施，严禁擅自拆改。


‍其实家里装修垂直空间的利用是常识问题，不仅可以满足一部分收纳，同时可以兼顾空间的装饰功能，只是大部分新手业主不知道怎么去做，导致装修完了以后家徒四壁还收纳不足。…1.门厅垂直利用
洞洞板的强大功能是毋庸置疑的，门厅垂直空间利用出镜率非常高的产品，不仅可以满足多样收纳，同时也可以装饰空间《家居收纳，门厅洞洞板利用》拱形洞洞板造型与全身镜的搭配，或者是洞洞板隐藏全身镜的做法，也是常见的方式。《门厅，换鞋凳+全身镜，真是绝配》利用门厅垂直墙面实现挂衣钩以及穿衣镜一体化设计，也是最简单常用的做法，需要注意的就是排列方式，不仅仅实现功能，还得照顾颜值除过常见的洞洞板以及挂衣钩以外，还可以定制挂衣板，颜值也高，功能也满足，同时也可以搭配风格使用门厅满足功能以外，可以利用做海报墙或者照片墙，实现进门第一眼的仪式感《挂画和装饰品，拯救空白墙》门厅最容易忽视的就是防盗门的垂直空间利用，因为防盗门都是金属，这里就可以采用磁吸挂件满足各种悬挂收纳…2.过道垂直墙面利用无需功能性的装饰，例如过道背景以及两侧墙面，都可以通过摆件或者挂画的形式，让过道空间更温馨和有层次《让你的家更有格调！10种过道背景值得借鉴》利用过道墙面实现绘本以及杂志收纳，满足功能，同时还能兼顾颜值《别再小看杂志架了！它可是家居界的颜值担当！》过道墙面乐高墙或者照片墙布局，也是非常常见的做法，装饰了空间，满足了功能和仪式感《拯救空白墙，乐高墙+黑板墙搞定》过道墙面也可以采用洞洞板满足一部分收纳，同时也可以提升空间层次《过道巧收纳，洞洞板助力，美观实用两不误》过道墙面也可以满足一个手办展示区《各种手办展示，拯救空白墙》利用过道尽头背景或者砸墙实现书架的功能，也是常见做法，满足家里的图书收纳，同时可以满足过道的视觉层次《没有地方放书？过道秒变实用书柜！》利用过道实现壁龛功能，同时满足收纳，同时也合理利用了垂直空间《过道也可以实现壁龛，美观也实用》
…3.客厅垂直空间的利用客厅一面墙做成涂鸦墙，既满足了功能，又能作为装饰空间的作用《拯救空白墙，乐高墙+黑板墙搞定》客厅空白墙面，采用墙挂系统满足一个展示和置物功能，功能和颜值都可以兼顾《除过收纳柜，客厅垂直墙面怎么置物？》利用沙发背景洞洞