Security audit

阳台装修避坑

Security checks for vulnerabilities and agentic risk

Overview

This balcony-design guide has clear safety boundaries and requests no sensitive access, though its renovation tips need professional checking.

Use this for design ideas and follow its main safety boundaries. Have qualified professionals assess your building before removing walls, changing drainage, or deciding to omit waterproofing. Some articles use overly absolute wording, and many topic-index references are missing.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

Output HandlingUnvalidated Output Injection, Cross-Context Output, Unbounded Output
MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access

Findings (8)

L16–L22 recommend opening the balcony into the living room without warning about structural restrictions.

High

Category: Output Handling
Confidence: 97% confidence
Finding: The reference repeatedly presents opening the balcony into the living room as the preferred solution without distinguishing removable doors from structural walls, counterweight walls, or beams. The main skill's structural warning mitigates the risk, but this standalone reference has an empty safety notice and could still lead the agent to recommend unsafe demolition.
Content: No source excerpt is available for this finding.

L39–L41 recommend demolishing the balcony separation to expand the dining room without a structural safety warning.

High

Category: Output Handling
Confidence: 98% confidence
Finding: The dining-room example explicitly recommends demolition to absorb the balcony without identifying which elements may safely be removed. Although the main skill supplies general safeguards, the reference's empty safety notice and preference-based framing could produce advice that endangers structural integrity.
Content: No source excerpt is available for this finding.

L06–L08 recommend merging the balcony with the interior without warning about structural safety constraints.

High

Category: Output Handling
Confidence: 95% confidence
Finding: The reference recommends merging even a small bedroom balcony into the interior without conditioning that recommendation on structural feasibility. While integration does not necessarily require structural demolition, the unconditional wording and empty safety notice can encourage unsafe interpretations; the main skill's warning reduces but does not eliminate this risk.
Content: No source excerpt is available for this finding.

L35 recommends completely demolishing the balcony separation without structural or approval warnings.

High

Category: Output Handling
Confidence: 99% confidence
Finding: The instruction to completely demolish the balcony separation is ambiguous about structural limits and supplies no assessment or approval prerequisites. In a renovation-advice skill, repeating this advice could encourage removal of load-bearing or counterweight elements, with serious injury and property-damage consequences despite the general warning in the main file.
Content: No source excerpt is available for this finding.

Wall-demolition recommendations omit structural-safety warnings.

High

Category: Output Handling
Confidence: 99% confidence
Finding: The reference explicitly praises demolishing a balcony-side wall and completely opening the balcony without establishing whether the affected elements are structural. Its empty safety notice leaves a hazardous recommendation available for reuse, and the main skill's general prohibition does not resolve this conflicting guidance.
Content: No source excerpt is available for this finding.

Advice dismissing balcony waterproofing omits the risk of leaks and property damage.

Medium

Category: Output Handling
Confidence: 98% confidence
Finding: The reference dismisses waterproofing and floor drainage for a tiled-through balcony without assessing washing-machine leaks, rain ingress, drainage capacity, or local requirements. This can cause the agent to recommend removing protective measures, leading to flooding and damage to neighboring properties; the main skill's requirement for professional work does not correct the underlying claim.
Content: No source excerpt is available for this finding.

Instructions to omit waterproofing from a laundry balcony lack a water-damage warning.

Medium

Category: Output Handling
Confidence: 99% confidence
Finding: The reference explicitly recommends saving money by omitting waterproofing on a laundry balcony, treating a standpipe and continuous tiling as sufficient justification. Neither prevents damage from supply-hose failures, appliance leaks, or overflow, so repeating this advice could cause substantial water damage despite the introductory statement that the suggestions are not universal rules.
Content: No source excerpt is available for this finding.

The topic router expands a balcony-only skill into unrelated whole-home renovation advice.

Low

Category: Excessive Agency
Confidence: 93% confidence
Finding: The manifest at L003 explicitly focuses on the balcony itself, but L026–L028 route to topics such as kitchen storage, staircase design, bedroom ceilings, and whole-home ceiling styles without requiring a balcony connection. The usage instruction at L034 tells the agent to select references through this router, making these unrelated topics part of the skill's instructed behavior rather than merely incidental background material.
Content: No source excerpt is available for this finding.