Security audit

门窗封窗避坑指南

Security checks for vulnerabilities and agentic risk

Overview

This is a content-only Chinese renovation guide with no executable code, but its reference set includes broad and sometimes unsafe construction advice that should be reviewed before use.

Review the references before installing if users may rely on this for real renovation decisions. Treat it as homeowner discussion material only, and require licensed contractors, property management approval, and local code checks for wall removal, door/fire-safety changes, balcony waterproofing, gas, and electrical work. The package does not appear to run code or access your environment.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (30)

Intent-Code Divergence

High

Category: Not specified by scanner
Confidence: 97% confidence
Finding: The article begins with a demolition safety warning, but later includes a promotional related-item line about a renovation that 'directly knocked down a load-bearing wall,' which normalizes or recommends hazardous structural work. In this skill context, users may rely on embedded references as vetted renovation guidance, so contradictory messaging can encourage dangerous, potentially illegal construction actions with serious safety consequences.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 97% confidence
Finding: This markdown file contains user-facing content exclusively in Chinese and does not indicate that the language is optional, user-selected, or required for a documented regional purpose. Under the natural-language policy check, forcing a specific language without opt-in is a locale-policy concern.
Content: No source excerpt is available for this finding.

Description-Behavior Mismatch

Medium

Category: Not specified by scanner
Confidence: 98% confidence
Finding: The referenced file is materially mis-scoped relative to the skill manifest: it is a broad home-renovation cost/pitfall article rather than a dedicated 门窗/封窗 guide. This can cause retrieval contamination, misleading users with irrelevant advice, and weakening trust or safety guardrails if users expect specialized window/door guidance but receive generic renovation recommendations instead.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 95% confidence
Finding: The entire skill content is written only in Chinese and provides no indication of language choice, localization options, or user opt-in. Under the policy, forcing a specific language without user choice can constitute a natural-language policy violation.
Content: No source excerpt is available for this finding.

Description-Behavior Mismatch

Medium

Category: Not specified by scanner
Confidence: 97% confidence
Finding: The referenced file is materially misaligned with the skill’s stated purpose: it is a broad renovation case study, not a focused door/window risk-avoidance guide. In a safety-adjacent home-improvement skill, off-topic reference material can cause the agent to surface irrelevant or unsafe renovation advice, weakening domain safeguards and user trust.
Content: No source excerpt is available for this finding.

Missing User Warnings

Medium

Category: Not specified by scanner
Confidence: 96% confidence
Finding: The content gives broad, prescriptive advice that balcony waterproofing is unnecessary if tile is continuous or a standpipe is used, without adequately accounting for leakage, appliance failure, façade rain intrusion, drainage defects, or building-specific code and climate requirements. In a home-renovation guidance skill, users may act directly on this advice, creating a credible risk of water damage, mold, neighbor-unit leakage, and unsafe noncompliant construction.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 95% confidence
Finding: The file presents all guidance in Chinese and does not indicate that the skill is China-specific or that users can choose another language. Under the language/locale policy, forcing a single language without user opt-in is a natural-language policy concern.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 95% confidence
Finding: This file presents all guidance exclusively in Chinese, and nowhere indicates that the skill is intentionally limited to Chinese-speaking users or provides an opt-in for language/locale. Under the policy, forcing a specific language without user choice can be a natural-language policy violation.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 95% confidence
Finding: The entire skill content is written only in Chinese and provides no indication that users may choose another language or locale. Under the stated policy, a language-specific skill should either offer opt-in/choice or clearly justify the locale restriction.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 88% confidence
Finding: The entire skill content is presented only in Chinese, with no indication that language selection is optional or that the material is intended exclusively for a Chinese-speaking or region-specific audience. Under the policy rubric, a fixed language without opt-in or documented justification can be a natural-language policy issue.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 82% confidence
Finding: The document presents all instructions and descriptive content exclusively in Chinese. Under the policy rules, forcing a specific language without user opt-in can be a natural-language policy violation unless the locale constraint is explicitly documented and justified, which is not present here.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 93% confidence
Finding: This markdown file presents all user-facing content in a single language and does not indicate that the user can choose another language or locale. Under the stated policy, forcing a specific language without user opt-in is a natural-language policy concern.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 92% confidence
Finding: This file contains user-facing natural-language instructions exclusively in Chinese, and there is no indication that the skill is intentionally region-specific or that users can opt into a preferred language. Under the language/locale policy, forcing a single language without opt-in can be a policy concern.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 86% confidence
Finding: This markdown file presents all user-facing content exclusively in Chinese, and there is no indication that the user can choose another language or that the locale restriction is intentional. Under the natural-language policy rules, forcing a specific language without user opt-in can be a policy violation.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 86% confidence
Finding: This file is natural-language content and appears to require Chinese comprehension throughout, but it does not indicate that the skill is intentionally limited to Chinese users or provide any opt-in or alternative language handling. Under the stated policy, forcing a specific language without user choice can be a locale-policy violation.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 91% confidence
Finding: This file contains user-facing natural language that assumes a Chinese-speaking audience and does not provide any opt-in, alternative language, or justification for a language restriction. Under the policy rule, forcing a specific language without user choice can be a natural-language policy violation.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 91% confidence
Finding: This markdown file uses only Chinese throughout, including the title, safety notice, and recommendations, with no indication that the skill or reference is intentionally region-specific or that users can choose another language. Under the policy rule, forcing a specific language without opt-in is a natural-language policy concern.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 85% confidence
Finding: This markdown file presents all instructions and descriptions exclusively in Chinese, and there is no indication that users can select another language or opt in to this locale. Under the policy rule for natural-language violations, forcing a specific language without user choice can be a locale-policy issue.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 91% confidence
Finding: This markdown file contains user-facing natural language exclusively in Chinese, and there is no indication that the skill is limited to a Chinese-speaking audience or that users can choose another language. Per the policy category, forcing a specific language without opt-in is a natural-language policy concern.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 92% confidence
Finding: This markdown content forces a specific language presentation for all users and does not provide any opt-in, alternative language, or justification that it is intended only for a Chinese-speaking or region-specific audience. Under the language/locale policy, this is a natural-language policy concern because users are not given a language choice.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 89% confidence
Finding: This markdown file presents all user-facing content in a single language and does not indicate that the user can choose another language or locale. Under the stated policy, forcing a specific language without user opt-in is a natural-language policy concern.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 96% confidence
Finding: This markdown file presents all instructions and descriptive content in a single language, Chinese, with no indication that the user opted into that locale or that the skill is region-specific. Under the stated policy, forcing a specific language without user opt-in is a natural-language policy concern.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 90% confidence
Finding: The entire skill file is written exclusively in Chinese and provides no indication that language choice is optional or that the content is intentionally limited to a Chinese-speaking audience. Under the stated policy, forcing a specific language without user opt-in can be a natural-language policy violation.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 92% confidence
Finding: This markdown file presents all user-facing content exclusively in Chinese, with no indication that the user can choose another language or that the locale restriction is intentional. Under the stated policy, forcing a specific language without user opt-in is a natural-language policy concern.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 84% confidence
Finding: SQP-3 applies to all file types and covers language or locale policy violations. This markdown file presents all instructions and claims only in Chinese, with no opt-in, alternative language, or justification that the skill is limited to a Chinese-speaking audience.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.