Security audit

装修流程不踩坑

Security checks for vulnerabilities and agentic risk

Overview

This is a Chinese-language home renovation guidance skill made of markdown reference files, with no executable code, persistence, credential access, or hidden data handling.

Install this if you want Chinese-language renovation process advice based on the bundled reference notes. Treat its construction standards, costs, timelines, and 2025-2026 claims as general guidance and verify local building rules, contractor terms, and current prices before relying on them.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (5)

Vague Triggers

Medium

Category: Not specified by scanner
Confidence: 90% confidence
Finding: The trigger list contains very broad phrases such as '装修流程', '装修步骤', and '第一次装修', which can cause the skill to activate for many generic home-improvement queries outside a narrowly intended scope. Over-broad invocation increases the chance of unintended routing, response hijacking over more appropriate skills, and user confusion, especially when the skill imposes rigid answer formatting and domain assumptions.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 83% confidence
Finding: The role and response rules require the assistant to answer in colloquial Chinese (“说人话”, “大白话”, like a local renovation expert) and do not indicate that the user may choose another language or locale. This can conflict with language-choice policy when applied in broader contexts where user preference is not explicitly Chinese.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 78% confidence
Finding: 该文件全文以中文提供操作性指导，没有说明这是面向中文用户的限定文档，也未提供其他语言/本地化选项。从自然语言政策角度看，这构成了默认强制单一语言输出的情况。
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 81% confidence
Finding: The entire skill content is presented only in Chinese and does not indicate that users may choose another language or locale. Under the policy rule, forcing a specific language without opt-in can be a natural-language policy concern when no justification or language choice is provided.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 88% confidence
Finding: The skill name and description are entirely in Chinese, which signals a language-specific experience, but the manifest does not state that the skill is limited to Chinese-speaking users or provide any language choice. Under the policy, forcing a specific language without user opt-in can be a natural-language policy violation unless the locale constraint is explicitly documented and justified.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.