Back to skill

Security audit

小户型装修避坑指南

Security checks for vulnerabilities and agentic risk

Overview

This is a markdown-only Chinese small-apartment renovation advice skill with some content-quality and safety-caution notes, but no hidden agent control or harmful runtime behavior found.

Reasonable to install if you want Chinese-language small-home renovation guidance. Treat product mentions neutrally, and verify structural changes, wall removal, plumbing, electrical, gas, stove-adjacent storage, knife storage, waterproofing, and code/HOA requirements with qualified professionals before acting.

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (70)

Hidden Instructions

High
Category
Prompt Injection
Confidence
85% confidence
Finding

Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.

Content

Scanner excerpt · references/ref-011.md (reported line 3)May include surrounding context.

md
# 一间卧室就有7种布局!感觉自己家又白装了!

卧室功能里头不外乎床、衣柜、斗柜、书桌以及化妆台布局,但是不同布局就有不同的价值,如果盲目去做很有可能功能满足不了,空间价值还得降低。所以今天盘点一下,卧室究竟有多少种更合理的布局,来实现空间价值的最大化。第一、传统布局。传统布局对于小空间来说挤压空间,看似满足了功能,但是空间的价值全无。而且卧室颜色大忌就是灰色,大面积灰色会让空间整体显得廉价。除非空间很大,否则传统的卧室布局,床体居中非常挤压空间,同时也让空间利用率更低。空间很大的话,即使你用传统做法也不会显得空间拥挤,还能满足功能,但是空间小的话,就需要改变布局,满足空间的最大化利用。第二、长条卧室改变传统布局。2米乘以4.5的空间,利用靠最里头打造地台床,实现卧室床铺功能,同时借用了隔壁房间,实现了内嵌的书桌和衣柜功能;让空间更大,也让功能布局更加合理。把床靠窗户布局,长条形的优势发挥出来,衣柜与转角书桌书架一体化布局,同时满足了收纳和办公功能,而且空间利用率更高。长条形一字布局,采用定制榻榻米或者排骨架床,与衣柜以及阳台书桌一字设计,可以满足功能的最大化,同时空间利用率最大化。榻榻米靠窗布局,剩下空间不仅实现了书桌办公,同时收纳量相当于一个小型衣帽间第三、床头靠门放置,提升空间利用率。床头靠门布局,腾出更多空间,利用过道墙面洞洞板收纳,窗下满足学习和办公,提升空间利用率床头靠门,与衣柜双一字布局,过道更宽敞,腾出更多空间价值。调换床头位置,以空间的价值化为主,才是装修的价值都刚需了别讲究风水了,先满足功能要紧,务实价值最大化才是王道第四、小空间,床不要居中放。网友@七十七:自从放弃床铺居中执念后, 我把家里两个卧室的布局都进行了调整, 将床靠墙放置,安全感拉满的同时, 还为房间的其他功能区域腾出更多空间~网友@剌剌:谁懂!11平小房间中间放张1.8米的床真的很拥挤,除了床头柜什么也放不下;不管大床小床都不要居中放,可以试试把床靠窗,这样可以走动的位置就变宽敞了,合理规划好空间,卧室小住起来也可以很舒适网友@葫芦宝:之前我家的床是放在卧室中间,两侧都放不下什么,可以说一张床占据了整个卧室。挪到窗边后空间立刻大了一半,女儿在旁边打个地铺都没有问题。网友@十十:与其床居中 留条窄走道 不如靠墙 放大另一侧空间 但其实是 我不想要两个床头柜网友@佳家:床的面积可以说是卧室里最大的了,所以他的位置摆放几乎可以决定其他家具的位置,秉着最大程度化利用房间的空间,还是将床靠边放,床尾多余的位置可以放上衣架或者衣柜,这样也方便起床后挑选要穿的衣服第五、床头靠窗户。网友@陶二宝:婆婆说:卧室床头不能对着窗户,但是…… 这样布置出来的卧室真的很香!这样的布局不但轻松拥有1.5米大床,还多出来一个学习区域,睡觉学习两不误网友@大莉水手:不理解,为啥床头靠窗摆会挨骂?床头靠窗摆放,放上了好多自己喜欢的物件,换个奶呼呼的吸顶灯,挂上‬喜欢的窗纱,瞬间变得氛围起‬来~ 不像之前又小又窄 - 别对空间做‬约束网友@oblivi:上周突然想把床换个方向试试 没想到卧室大了好多 原本放了伊娃之后床尾空间略有些挤 现在宽敞了很多 甚至可以放下书桌和椅子 并且靠墙后多了份安全感~网友@小J的:父母说床靠窗不吉利,但是真的好舒服啊~突发奇想给床挪到了床边,无床头的床非常适合diy,每天一睡醒就能看到蓝天,心情都会变美丽,但是父母却说床靠窗不吉利。我:小户型还讲究什么吉利不吉利~舒服就行网友@爱格格:卧室太小把床头调整到靠窗,床一侧靠墙空间立马大了很多,看着也不那么挤了,以前怎么没想到这么摆放,现在也不晚吧。网友@冷巴:无头的悬浮床没有空间限制,打破传统的布局,我把床头安排在靠窗位置,空间瞬间大了不少。网友@走堂:小房间可以多改变布局,试试不同的位置或朝向,只要自己舒适,不按常理也好,时时有惊喜和新鲜感。我的床没有床头,也不靠墙,我觉得很好睡,而且房间也因此显大了。第六、床对主卫门,调换床头。网友@美少女:2025年了,还有人要讲究风水,虽然不认同但是很尊重,我不怕厕所对着床,就把床头位置改了,然后得到了一个5米长的床尾衣柜,通风太好了,整个夏天没有开空调,晚上只开了风扇,庆幸自己做了这个选择,而且我还得到了一个超级宽敞的过道网友@彭饱饱:床头原本是靠主卧厕所那边,于是我把床头调转到对面 得到了一个4.5米整面床尾衣柜 整整10扇柜门 可以塞下我和老公两个人的衣服 落地后实用又好看又显空间大,还解决了床头对着厕所的问题 简直是一举多得!网友@小耳朵:三房两卫中间户通病少不了这个卫生间门对床,各位不妨试试换个床头方向,其实也还不错,房间看着也宽敞,也没有卫生间正对床头感觉膈应感。第七、床头不靠墙网友@小兑话:看腻了床头靠墙 一侧窗户一侧卫生间的布局 把床放在了房间
...[truncated 25 chars]

Hidden Instructions

High
Category
Prompt Injection
Confidence
60% confidence
Finding

Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.

Content

Scanner excerpt · references/ref-035.md (reported line 34)May include surrounding context.

md
09微波炉置物架

▲台面微波炉架很常见,但是这种带有餐具抽屉的确实方便,而且可以调节高低,常用的调料餐具可以满足放置
‍
‍010旋转遮丑角落调料架

▲可以放到厨房角落不占地,最重要的是可以旋转拿取,不用的时候旋转可以遮挡储物的凌乱,比较美观的收纳

Hidden Instructions

High
Category
Prompt Injection
Confidence
60% confidence
Finding

Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.

Content

Scanner excerpt · references/ref-035.md (reported line 35)May include surrounding context.

md
09微波炉置物架

▲台面微波炉架很常见,但是这种带有餐具抽屉的确实方便,而且可以调节高低,常用的调料餐具可以满足放置
‍
‍010旋转遮丑角落调料架

▲可以放到厨房角落不占地,最重要的是可以旋转拿取,不用的时候旋转可以遮挡储物的凌乱,比较美观的收纳

Description-Behavior Mismatch

Medium
Category
Not specified by scanner
Confidence
96% confidence
Finding

This content is materially off-scope for a skill advertised as a small-apartment renovation pitfall guide: it is a general home networking/WiFi planning article for both small and large homes. Scope drift is dangerous in agent skills because it can cause the agent to retrieve and present irrelevant guidance, reducing reliability and potentially misleading users into decisions outside the promised domain.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

This markdown file presents all instructions and descriptive content in a single language and does not indicate that the user can choose another language. Under the policy, forcing a specific language without user opt-in is a natural-language policy violation unless the locale constraint is clearly justified.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
90% confidence
Finding

This markdown file presents all user-facing guidance in a single language and does not indicate that the user can choose another language or that the content is intentionally restricted to a Chinese-speaking audience. Under the policy provided, forcing a specific language without user opt-in is a natural-language policy violation.

Content

No source excerpt is available for this finding.

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
92% confidence
Finding

The content repeatedly recommends major bathroom reconfiguration techniques such as moving walls, splitting one bathroom into two, and relocating toilets, while presenting them as practical examples before clearly foregrounding safety, code-compliance, waterproofing, drainage, and structural constraints. In a home-renovation skill, users may treat this as actionable guidance and attempt unsafe or illegal modifications that can cause plumbing failures, leaks, sanitation issues, or damage to shared building systems.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
98% confidence
Finding

The entire skill file is written only in Chinese and provides no indication that users may choose another language or that the content is intentionally limited to a Chinese-speaking audience. Under the policy, forcing a specific language without opt-in is a natural-language locale violation.

Content

No source excerpt is available for this finding.

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
88% confidence
Finding

The document promotes a magnetic wall knife rack as a space-saving solution without discussing secure mounting, blade retention, child access, or accidental contact hazards. In a small-kitchen optimization guide, this omission can lead users to install knives in high-traffic or low-height areas where they may fall or be easily reached, causing injury.

Content

No source excerpt is available for this finding.

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
92% confidence
Finding

The content recommends placing a seasoning rack very close to the stove for convenience, but gives no warning about heat exposure, open flames, grease buildup, or ignition risk. In a home-improvement skill, users may treat the guidance as practical setup advice and place combustible or heat-sensitive items in unsafe locations near cooking surfaces.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

This markdown file contains only Chinese-language content and does not provide any user opt-in, alternative language option, or statement that the skill is intended only for a Chinese-speaking audience. Under the policy, forcing a specific language without user choice can be a natural-language policy violation.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

This markdown file presents all user-facing content in a single language and does not indicate that the skill is region-specific or that users can opt into this locale. Under the stated policy, forcing a specific language without user choice is a natural-language policy violation.

Content

No source excerpt is available for this finding.

Description-Behavior Mismatch

Medium
Category
Not specified by scanner
Confidence
96% confidence
Finding

The reference content is dominated by shopping-style promotional copy with repeated purchase prompts rather than guidance aligned to the skill’s stated purpose of small-apartment renovation pitfall avoidance. This creates a content-integrity issue: the agent may steer users toward products or affiliate-style recommendations instead of objective advice, which can mislead users and undermine trust in the skill.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
96% confidence
Finding

The entire skill content is written in Chinese and does not provide any indication that users can choose another language or that the skill is intentionally limited to a Chinese-speaking or region-specific context. Under the policy, hard-coded language constraints without opt-in or justification are a natural-language policy concern.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

This markdown file presents all user-facing content exclusively in Chinese, and there is no indication that the skill is intentionally limited to a Chinese-speaking audience or region. Under the language/locale policy, forcing a specific language without user opt-in can be a natural-language policy violation.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
91% confidence
Finding

This markdown file is entirely written in Chinese and provides no indication that language selection is optional or limited to a justified region-specific use case. Under the policy, language or locale constraints should not be imposed without user opt-in or clear justification.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
96% confidence
Finding

This markdown file is natural-language content, so policy checks apply. The file presents all guidance exclusively in Chinese and does not mention that the skill is Chinese-only, region-specific, or that users may choose another language, which can violate language/locale choice expectations.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
96% confidence
Finding

The instruction '不去 AI 味,用西安装修课堂"过日子"的口吻' requires the assistant to respond in a specific Chinese-localized voice/style. This imposes a locale/language presentation preference without indicating that the user can choose another language or opt in to that style.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
95% confidence
Finding

The usage section repeats the requirement to answer in the '西安装修课堂' colloquial style, but does not provide an opt-in or fallback based on user language preference. Under the language/locale policy, forcing a specific linguistic style without choice is a natural-language policy issue.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
93% confidence
Finding

This file contains user-facing natural language exclusively in Chinese and does not provide an opt-in, alternative language, or justification that it is intentionally region-specific. Under the stated policy, forcing a specific language without user choice is a natural-language policy concern.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
96% confidence
Finding

The entire skill content is presented only in Chinese, with no indication that language choice is optional or that the skill is region-specific. Under the stated policy, forcing a specific language without user opt-in is a natural-language policy violation.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
96% confidence
Finding

This markdown file consists entirely of Chinese-language instructional content and does not indicate that the user can choose another language or that the skill is intentionally limited to a Chinese-speaking audience. Under the stated policy, forcing a specific language without user opt-in is a natural-language policy concern.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
93% confidence
Finding

This markdown file presents all user-facing content in a single language and does not offer any language or locale choice. Under the policy rule, forcing a specific language without user opt-in is a natural-language policy concern unless the locale constraint is clearly documented and justified.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
82% confidence
Finding

The entire skill file is written in Chinese and presents its content in a single language with no indication that users can choose another language or locale. Under the policy rule for natural-language constraints, this can be a locale/language policy issue when no opt-in or documented justification is provided.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
95% confidence
Finding

The entire skill file is written in Chinese and does not provide any indication that users may choose another language or that the locale restriction is intentional and justified. Under the policy rule for natural-language violations, forcing a specific language without opt-in is reportable.

Content

No source excerpt is available for this finding.