装修采光技巧

• Outcome: Review
• Latest audit: Sep 6, 2026 · 7:18 AM UTC
• Version: 1.0.0

Overview

This Markdown-only renovation skill has no executable or data-access behavior, but it needs review because it gives broad, sometimes under-qualified advice about wall demolition and gas-related remodeling.

Install only if you want a Chinese renovation/daylighting knowledge pack and are comfortable with broad home-improvement references. Treat demolition, wall-opening, window, waterproofing, electrical, and gas advice as design inspiration only; require a licensed contractor or structural engineer, official gas/building approval, property-management approval, and local-code review before acting.

A.I.G

Vulnerability Patterns

• Skill Instruction Hijacking: Alters the agent's session goals or safety constraints when the skill loads
• Agent Memory Poisoning: Writes attacker-controlled rules into memory that affect later sessions
• Remote Payload Retrieval and Execution: Fetches external code whose behavior can change after review
• Embedded Malicious Code: Ships malicious scripts inside the skill and executes them locally
• Unauthorized Access and Privilege Escalation: Obtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• MCP Tool Poisoning: Hidden Instructions, Unicode Deception, Parameter Description Injection
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access

Findings (16)

Description-Behavior Mismatch

High

• Confidence: 98% confidence
• Finding: The file content is about hiding laundry-drying areas and storage aesthetics, which does not match the declared skill purpose of renovation lighting and daylighting advice. This kind of scope drift is dangerous because it degrades agent reliability, can mislead users seeking lighting guidance, and indicates weak content governance within the skill knowledge base.

Description-Behavior Mismatch

High

• Confidence: 98% confidence
• Finding: The referenced content is materially off-topic for a skill that claims to provide renovation daylighting techniques; it focuses on balcony cat furniture, storage, and pet-area layouts instead. This creates a skill integrity problem: users may receive irrelevant or misleading guidance, and the mismatch suggests weak curation or possible data poisoning of the skill knowledge base.

Description-Behavior Mismatch

Medium

• Confidence: 95% confidence
• Finding: The reference content is materially misaligned with the skill’s declared purpose of装修采光技巧, focusing instead on home-buying opinions, old-apartment tradeoffs, and property-selection advice. This can cause the agent to answer outside its advertised scope, increasing the risk of misleading users with low-relevance or speculative guidance and weakening trust and safety controls tied to the stated domain.

Description-Behavior Mismatch

High

• Confidence: 96% confidence
• Finding: The file content is substantially unrelated to the skill's declared specialization in daylighting and lighting-improvement advice, instead covering broad furniture, appliance, cabinetry, and soft-furnishing topics. This scope mismatch can cause the agent to provide out-of-domain guidance, weaken trust boundaries, and bypass user or system expectations about what knowledge the skill should contain.

Vague Triggers

Medium

• Confidence: 90% confidence
• Finding: The skill says to trigger on broadly defined 'related装修问题（无论是否已开工）', which creates an overly wide activation scope. This can cause unintended invocation on loosely related home-improvement conversations, increasing the chance the assistant applies this skill when it is not the best context and amplifying any unsafe renovation suggestions in situations involving structural changes, utilities, or safety-sensitive work.

Missing User Warnings

Medium

• Confidence: 93% confidence
• Finding: The content enthusiastically promotes knocking down or opening kitchen walls and gives multiple implementation ideas before prominently stating safety constraints. In a home-renovation skill, users may treat this as actionable guidance and proceed without proper structural review, code compliance checks, or ventilation/gas-safety assessment, creating risks of structural damage, unsafe kitchen layouts, and regulatory violations.

Missing User Warnings

Medium

• Confidence: 92% confidence
• Finding: The content recommends multiple structural modifications such as removing walls, opening window holes, and altering bathroom and entry layouts without clear warnings to verify load-bearing status, building code compliance, waterproofing, ventilation, or the need for licensed professionals. In a consumer-facing home renovation skill, users may act on this guidance directly, creating risks of structural damage, safety hazards, and costly illegal work.

Missing User Warnings

Medium

• Confidence: 95% confidence
• Finding: The content repeatedly encourages demolishing walls and reconfiguring rooms with imperative language like '能砸掉坚决砸掉' but provides no warning about structural load-bearing walls, electrical/plumbing hazards, permits, or the need for qualified professionals. In a home-renovation skill, this omission is especially dangerous because users may treat the advice as actionable guidance and perform unsafe demolition that can cause structural damage, injury, or code violations.

Natural-Language Policy Violations

Medium

• Confidence: 97% confidence
• Finding: The content includes an insulting generalization aimed at a national/cultural group (e.g., rhetoric about '祖国的花朵' and '自己的国度') in a way that is not necessary to the home-decoration topic. This is harmful because it injects discriminatory or contemptuous language into an otherwise benign skill, increasing the risk of offensive outputs, reputational damage, and policy violations if reused by the agent.

Missing User Warnings

Medium

• Confidence: 94% confidence
• Finding: The content explicitly encourages readers to open new windows in non-load-bearing walls as a general improvement tactic, but provides no warning about structural review, building code compliance, waterproofing, fire separation, utility routing, or approval requirements. In a home-renovation skill, users may treat this as actionable guidance and undertake unsafe demolition or alteration that can damage the property or create life-safety hazards.

Missing User Warnings

Medium

• Confidence: 95% confidence
• Finding: Phrases such as '大胆去做吧' strongly push readers toward irreversible structural modification without any balancing warning about safety, legality, or professional assessment. This increases the chance that a user follows the advice impulsively, potentially causing structural weakening, code violations, smoke/fire compartment issues, or costly damage.

Missing User Warnings

Medium

• Confidence: 97% confidence
• Finding: The content repeatedly advises opening new windows, demolishing half or all of kitchen walls, and replacing walls with glass without any warning about load-bearing structures, fire separation, utilities, or permit requirements. In a home-renovation skill, users may treat these examples as actionable guidance, creating a real risk of structural damage, code violations, gas/fire hazards, or occupant injury.

Natural-Language Policy Violations

Medium

• Confidence: 97% confidence
• Finding: The skill content is entirely in Chinese and provides no indication that the agent should adapt to the user's preferred language or locale. This can cause the agent to override user language expectations, reducing usability and potentially leading to misunderstandings of design or safety-related advice; in this home-improvement context, misunderstanding details can have real downstream consequences.

Missing User Warnings

Medium

• Confidence: 90% confidence
• Finding: The content recommends wall demolition and structural layout changes as practical renovation tactics without giving an immediate safety warning to verify load-bearing status, building code compliance, property management rules, and licensed professional review before action. In a home-renovation skill, users may treat these suggestions as actionable guidance, creating a real risk of unsafe structural modification, legal violations, or damage to shared building systems.

Missing User Warnings

Medium

• Confidence: 93% confidence
• Finding: The content encourages readers to remove walls, open window-like wall penetrations, and alter layouts to improve lighting and flow, but it provides no safety warning about load-bearing walls, waterproofing, ventilation, electrical/plumbing lines, permits, or the need for qualified structural review. In a home-renovation skill, these omissions can plausibly lead users to attempt unsafe structural modifications based on simplified advice, creating real risks of property damage or personal injury.

Missing User Warnings

Medium

• Confidence: 95% confidence
• Finding: The content gives concrete renovation instructions involving wall demolition, kitchen reconfiguration, glass substitutions, and gas-service sequencing, but it does not clearly require licensed structural/gas professionals, permit checks, or code compliance review. In a home-improvement skill, users may treat these steps as actionable guidance and attempt unsafe demolition or gas-related modifications, creating risks of structural damage, fire, explosion, or regulatory violations.

Static analysis

No suspicious patterns detected.