Security audit

阳台避坑指南

Security checks for vulnerabilities and agentic risk

Overview

This is a read-only balcony-renovation advice skill, but its reference set contains off-topic, promotional, and sometimes unsafe renovation guidance that should be reviewed before use.

Review this skill before installing if you expect a tightly scoped balcony-safety guide. It does not appear to run code or access private data, but its advice should not be relied on for structural demolition, facade/window changes, waterproofing, plumbing, electrical work, or real-estate decisions without licensed professional review and local permit/property-management approval. Off-topic and promotional references should be removed or clearly separated.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration

Findings (28)

Description-Behavior Mismatch

High

Confidence: 96% confidence
Finding: The file content is clearly about bedroom bed-end renovation ideas, while the skill manifest says the skill is dedicated to balcony renovation guidance. This mismatch can cause the agent to retrieve and present irrelevant advice, reducing trust and potentially leading users to make poor renovation decisions because the referenced guidance does not apply to their balcony scenario. In this skill context, the issue is more dangerous because users are seeking domain-specific home-improvement advice where incorrect scope can directly affect cost, planning, and construction choices.

Description-Behavior Mismatch

Medium

Confidence: 93% confidence
Finding: The file contains extensive guidance on kitchens, bathrooms, dining rooms, bedrooms, and living rooms even though the skill is declared as a balcony-focused renovation guide. This scope mismatch can cause the agent to retrieve and present unrelated whole-home renovation advice, weakening policy boundaries and increasing the chance of off-topic or unsafe recommendations outside the skill’s intended domain.

Context-Inappropriate Capability

Medium

Confidence: 95% confidence
Finding: Embedding broad whole-home renovation knowledge in a balcony-specific skill is an unjustified expansion of capability. In practice, this can bypass least-privilege design for skills by enabling advice on demolition, doors, flooring, lighting, and room-wide remodeling that users did not request, increasing the risk of inappropriate, misleading, or unsafe guidance.

Description-Behavior Mismatch

Medium

Confidence: 95% confidence
Finding: The file is supposed to support a balcony-specific pitfall-avoidance skill, but most of the content is a whole-home renovation case study covering living room, bedroom, dining room, study, and general design opinions. This scope drift can cause the agent to answer outside its declared domain, reducing reliability and increasing the chance of unsafe or irrelevant renovation guidance being presented as balcony expertise.

Context-Inappropriate Capability

Low

Confidence: 89% confidence
Finding: The embedded product recommendations and purchase prompts are not necessary for a balcony pitfall-avoidance guide and introduce promotional bias into the knowledge source. If surfaced by the agent, they can steer users toward purchases unrelated to their safety or renovation needs, undermining trust and potentially distorting advice.

Description-Behavior Mismatch

Medium

Confidence: 95% confidence
Finding: The file materially exceeds the stated balcony-only scope by providing guidance for whole-home appliance planning, including kitchens, bathrooms, HVAC, curtains, TVs, and projectors. This scope drift is dangerous because it can cause the agent to answer outside its declared expertise and constraints, increasing the chance of misleading users and violating least-privilege or least-scope design expectations.

Context-Inappropriate Capability

Medium

Confidence: 94% confidence
Finding: The document embeds multiple non-balcony advisory capabilities that are not justified by the skill's stated purpose, effectively expanding the skill into a general renovation advisor. In context, this is risky because users and downstream systems may trust the skill as narrowly specialized while it actually influences unrelated electrical, plumbing, and appliance decisions across the home.

Description-Behavior Mismatch

Medium

Confidence: 95% confidence
Finding: The file content is largely a general home-decoration showcase and shopping-style narrative, with only a brief mention of the balcony. This creates a scope-integrity problem: the skill claims to provide balcony pitfall-avoidance guidance, but this reference may cause the agent to return irrelevant or misleading advice, reducing reliability in renovation decisions where users may expect safety- and construction-related guidance.

Description-Behavior Mismatch

Medium

Confidence: 93% confidence
Finding: The file content is a shopping/product-sales list for unrelated household goods and does not match the skill’s stated purpose of providing balcony renovation guidance. This kind of scope drift can mislead users, degrade agent reliability, and create an avenue for covert commercial promotion or content poisoning inside a domain-specific skill.

Description-Behavior Mismatch

Medium

Confidence: 91% confidence
Finding: The referenced file is overwhelmingly about general ceiling design and decorative inspiration, while the skill is explicitly scoped to balcony renovation and risk avoidance. This scope drift can cause the agent to retrieve and present irrelevant or misleading guidance, weakening reliability and potentially leading users to make inappropriate renovation decisions in a balcony context.

Description-Behavior Mismatch

High

Confidence: 98% confidence
Finding: The file contains extensive home-buying, investment, and location-selection guidance that materially exceeds the declared balcony-renovation scope of the skill. This scope drift is dangerous because it can cause the agent to provide unvetted financial, legal, health, and housing advice under a misleading skill identity, increasing the chance of harmful reliance by users.

Context-Inappropriate Capability

Medium

Confidence: 97% confidence
Finding: The file includes real-estate purchasing and investment guidance not justified by a balcony-specific renovation skill, such as advice on school districts, price appreciation, and neighborhood desirability. In context, this creates a trust and safety issue because users may reasonably assume the advice is authoritative and in-scope when it is not, leading to misleading recommendations and potential economic harm.

Description-Behavior Mismatch

Medium

Confidence: 95% confidence
Finding: The reference content is largely general interior design and kitchen guidance, while the skill is घोषित as a balcony-specific guide. This mismatch can cause the agent to provide irrelevant or misleading renovation advice, reducing trust and potentially leading users to make poor planning decisions in a safety- and cost-sensitive domain.

Description-Behavior Mismatch

Medium

Confidence: 91% confidence
Finding: The reference file is materially misaligned with the declared skill scope of balcony renovation and avoidance guidance, instead containing broad advice on wardrobes, sofas, kitchen cabinets, appliances, curtains, lighting, and whole-home furnishing. This can cause the agent to answer outside its advertised domain, increasing the risk of misleading users, bypassing routing or policy assumptions, and degrading trust in skill boundaries.

Missing User Warnings

Medium

Confidence: 95% confidence
Finding: The content gives detailed guidance for modifying air-conditioner exterior unit spaces, enclosing openings, adding platforms, and repurposing structural/service areas without meaningful safety, code, landlord/HOA, or professional-engineering warnings. These suggestions could lead users to perform non-compliant structural, fire-egress, waterproofing, ventilation, load-bearing, or equipment-maintenance modifications, creating injury, property-damage, or legal risk.

Missing User Warnings

High

Confidence: 98% confidence
Finding: The content repeatedly encourages removing all balcony/living-room walls to maximize space and aesthetics, while only briefly noting that a load-bearing wall cannot be removed in one example. It omits critical safety guidance about structural assessment, code compliance, waterproofing, enclosure changes, and permit requirements, which is dangerous in a home-renovation skill because users may imitate the advice and damage structural or building-envelope elements.

Missing User Warnings

Medium

Confidence: 92% confidence
Finding: The content recommends removing original doors/windows and reshaping openings in an old-home balcony renovation context without any safety, structural, permitting, or property-management warning. In this skill’s domain, users may treat the guidance as actionable advice, and unsafe modification of window/door assemblies or openings can create structural, fall-protection, waterproofing, thermal, and code-compliance risks.

Missing User Warnings

Medium

Confidence: 93% confidence
Finding: The content recommends demolition actions such as removing doors, insulation walls, and parts of walls to enlarge balcony space, but provides no warning about load-bearing constraints, waterproofing, facade rules, drainage, or required professional review. In a home-renovation skill, users may treat these as actionable instructions and perform unsafe structural or building-envelope modifications, creating real safety and compliance risks.

Missing User Warnings

Medium

Confidence: 96% confidence
Finding: This section repeatedly endorses broad demolition and reconstruction ('全部拆了', removing balcony walls, push-pull doors, ceilings, changing windows/doors, adding HVAC) without any safety caveats or sequencing guidance. Because the skill is specifically positioned as a '避坑指南' for balcony renovation, the absence of warnings makes the advice more dangerous: users are likely to rely on it as best practice despite structural, fire-safety, waterproofing, and building-system hazards.

Missing User Warnings

Medium

Confidence: 93% confidence
Finding: The content gives prescriptive home-renovation advice to remove insulation walls in multiple areas and frames some cases as mandatory, but it does not warn about structural/building-envelope implications, moisture and condensation risks, fire-performance changes, code or HOA/property restrictions, or the need for professional assessment. In a DIY renovation guidance skill, this omission can cause users to perform unsafe or noncompliant modifications that lead to property damage or occupant-safety issues.

Missing User Warnings

Medium

Confidence: 95% confidence
Finding: The content explicitly advises that waterproofing and floor drains are unnecessary for certain balcony laundry setups and further minimizes burst-pipe risk as 'almost impossible.' In a home-renovation skill, users may rely on this as authoritative guidance, which can lead to preventable water damage, seepage to adjacent units, mold, or electrical hazards if leaks occur despite the reassurance.

Missing User Warnings

Medium

Confidence: 93% confidence
Finding: The content gives actionable advice about opening a bedroom to a balcony and visually concealing a beam while only briefly noting that some load-bearing structure cannot be moved. It does not clearly warn that any wall/beam modification must be assessed by a licensed structural professional and may require permits, so users could infer that structural alteration is mainly a design problem and undertake unsafe work.

Vague Triggers

Medium

Confidence: 82% confidence
Finding: The broad keyword recommendation block can cause overly permissive triggering or retrieval of this document for loosely related user inputs, even when the user is not asking about balcony pitfall guidance. In a skill system, this can degrade routing precision and surface irrelevant or commercial-style content, increasing the chance of poor or misleading responses.

Natural-Language Policy Violations

Medium

Confidence: 95% confidence
Finding: The text includes disparaging language toward a group of readers (e.g., insulting people who criticize homeownership-focused content), which is harmful and inappropriate in a user-facing skill. While it does not create a direct technical exploit, it introduces toxic content risk, can alienate users, and may violate platform content or safety standards.

Missing User Warnings

Medium

Confidence: 97% confidence
Finding: The content explicitly advises that balcony areas with washing machines or leisure use do not need waterproofing if a standpipe is used, and even says '通铺了就不做防水'. In a home-renovation skill, this is dangerous because leaks, hose failures, overflow, and construction defects can allow water to migrate into adjacent interior spaces, causing property damage, mold, and disputes; the omission of code/compliance caveats and professional assessment makes the advice unsafe.

Static analysis

No suspicious patterns detected.