ClawHub
Back to skill

Security audit

装修方案诊断

Security checks across malware telemetry and agentic risk

Overview

This is a renovation advice skill with no executable code, but users should treat wall, kitchen, plumbing, and layout-change suggestions as ideas to verify with qualified professionals.

Installers should understand this is advisory renovation content, not licensed engineering or permitting guidance. Before removing walls, changing wet areas, creating an open kitchen, relocating appliances, or altering ventilation/drainage, confirm requirements with a qualified designer, contractor, structural engineer, and property manager where applicable.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (3)

Vague Triggers

Medium
Confidence
93% confidence
Finding
The trigger list contains many generic renovation-related phrases such as '装修设计', '户型改造', '空间布局', and conversational queries like '我的方案合理吗', which are likely to appear in normal user requests outside the narrow intent of this specific skill. Overly broad triggers can cause unintended invocation, leading the agent to route users into this skill unexpectedly and provide domain-specific guidance when the user may have wanted general assistance or another tool.

Missing User Warnings

Medium
Confidence
94% confidence
Finding
The content repeatedly recommends wall demolition and layout changes such as removing walls, exteriorizing wet areas, and expanding corridors without a clear warning that only non-load-bearing walls may be altered and that structural, plumbing, waterproofing, and building-management approval may be required. In a home-renovation skill, users may treat these as actionable instructions, creating a realistic risk of unsafe structural modification or non-compliant remodeling.

Missing User Warnings

Medium
Confidence
96% confidence
Finding
The text recommends converting the kitchen to an open kitchen and replacing walls with glass without warning about gas-appliance restrictions, ventilation capacity, smoke containment, and fire-safety or code requirements. Because this skill is specifically positioned as practical renovation guidance, users may rely on it and make unsafe or illegal changes that increase fire, smoke, and indoor-air risks.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.