装修施工手册

• Outcome: Pass
• Latest audit: Oct 1, 2026 · 8:54 AM UTC
• Version: 1.0.0

Overview

This is a Chinese home-renovation reference skill with no code execution or data-access behavior, though users should treat its DIY construction guidance as informational and verify safety-critical work with professionals.

Install only if you want a Chinese-language, China/Xi'an-influenced renovation handbook. Treat construction, electrical, gas, waterproofing, chemical, and structural advice as planning guidance, not a substitute for licensed local professionals, PPE, permits, and building-code checks.

A.I.G

Vulnerability Patterns

• Skill Instruction Hijacking: Alters the agent's session goals or safety constraints when the skill loads
• Agent Memory Poisoning: Writes attacker-controlled rules into memory that affect later sessions
• Remote Payload Retrieval and Execution: Fetches external code whose behavior can change after review
• Embedded Malicious Code: Ships malicious scripts inside the skill and executes them locally
• Unauthorized Access and Privilege Escalation: Obtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (146)

Hidden Instructions

High

• Category: Prompt Injection
• Confidence: 60% confidence

Finding

Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.

Content

Scanner excerpt · references/ref-164.md (reported line 4)May include surrounding context.

md

# 8个地方的墙面你都无视了，收纳肯定不够

8个地方的墙面你都无视了，收纳肯定不够
‍其实家里装修垂直空间的利用是常识问题，不仅可以满足一部分收纳，同时可以兼顾空间的装饰功能，只是大部分新手业主不知道怎么去做，导致装修完了以后家徒四壁还收纳不足。…1.门厅垂直利用
洞洞板的强大功能是毋庸置疑的，门厅垂直空间利用出镜率非常高的产品，不仅可以满足多样收纳，同时也可以装饰空间《家居收纳，门厅洞洞板利用》拱形洞洞板造型与全身镜的搭配，或者是洞洞板隐藏全身镜的做法，也是常见的方式。《门厅，换鞋凳+全身镜，真是绝配》利用门厅垂直墙面实现挂衣钩以及穿衣镜一体化设计，也是最简单常用的做法，需要注意的就是排列方式，不仅仅实现功能，还得照顾颜值除过常见的洞洞板以及挂衣钩以外，还可以定制挂衣板，颜值也高，功能也满足，同时也可以搭配风格使用门厅满足功能以外，可以利用做海报墙或者照片墙，实现进门第一眼的仪式感《挂画和装饰品，拯救空白墙》门厅最容易忽视的就是防盗门的垂直空间利用，因为防盗门都是金属，这里就可以采用磁吸挂件满足各种悬挂收纳…2.过道垂直墙面利用无需功能性的装饰，例如过道背景以及两侧墙面，都可以通过摆件或者挂画的形式，让过道空间更温馨和有层次《让你的家更有格调！10种过道背景值得借鉴》利用过道墙面实现绘本以及杂志收纳，满足功能，同时还能兼顾颜值《别再小看杂志架了！它可是家居界的颜值担当！》过道墙面乐高墙或者照片墙布局，也是非常常见的做法，装饰了空间，满足了功能和仪式感《拯救空白墙，乐高墙+黑板墙搞定》过道墙面也可以采用洞洞板满足一部分收纳，同时也可以提升空间层次《过道巧收纳，洞洞板助力，美观实用两不误》过道墙面也可以满足一个手办展示区《各种手办展示，拯救空白墙》利用过道尽头背景或者拆墙实现书架的功能，也是常见做法，满足家里的图书收纳，同时可以满足过道的视觉层次《没有地方放书？过道秒变实用书柜！》利用过道实现壁龛功能，同时满足收纳，同时也合理利用了垂直空间《过道也可以实现壁龛，美观也实用》
…3.客厅垂直空间的利用客厅一面墙做成涂鸦墙，既满足了功能，又能作为装饰空间的作用《拯救空白墙，乐高墙+黑板墙搞定》客厅空白墙面，采用墙挂系统满足一个展示和置物功能，功能和颜值都可以兼顾《除过收纳柜，客厅垂直墙面怎么置物？》利用沙发背景洞洞板满足置物以及空间装饰层次，也可以满足展示功能《家居收纳，客厅洞洞板利用》客厅与阳台打通以后，利用垂直空间满足猫爬架的布局，同时沙发上头也可以做猫咪活动的隔板，合理利用垂直空间利用客厅墙面实现壁龛的收纳和展示功能，同时满足空间视觉层次《不浪费一寸空间！客厅壁龛设计攻略》客厅垂直墙面也可以利用起来满足盲盒的展示功能《各种手办展示，拯救空白墙》…4.餐厅垂直空间利用
餐厅墙面隔板做法非常常见，满足展示以及少量零碎的精致收纳餐厅有空白墙面，也可以利用起来满足家里手办盲盒的展示，同时提升了空间层次餐厅墙面也可以满足一个杂志架的收纳，同时满足视觉上的丰富《别再小看杂志架了！它可是家居界的颜值担当！》也可以利用餐厅墙面实现壁龛的收纳和展示，非常实用，颜值也高《餐厅壁龛，满足功能，提升颜值》…5.卧室书房墙面的垂直利用

Hidden Instructions

High

• Category: Prompt Injection
• Confidence: 60% confidence

Finding

Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.

Content

Scanner excerpt · references/ref-176.md (reported line 4)May include surrounding context.

md

# 8个地方的墙面你都无视了，收纳肯定不够

8个地方的墙面你都无视了，收纳肯定不够
‍其实家里装修垂直空间的利用是常识问题，不仅可以满足一部分收纳，同时可以兼顾空间的装饰功能，只是大部分新手业主不知道怎么去做，导致装修完了以后家徒四壁还收纳不足。…1.门厅垂直利用
洞洞板的强大功能是毋庸置疑的，门厅垂直空间利用出镜率非常高的产品，不仅可以满足多样收纳，同时也可以装饰空间《家居收纳，门厅洞洞板利用》拱形洞洞板造型与全身镜的搭配，或者是洞洞板隐藏全身镜的做法，也是常见的方式。《门厅，换鞋凳+全身镜，真是绝配》利用门厅垂直墙面实现挂衣钩以及穿衣镜一体化设计，也是最简单常用的做法，需要注意的就是排列方式，不仅仅实现功能，还得照顾颜值除过常见的洞洞板以及挂衣钩以外，还可以定制挂衣板，颜值也高，功能也满足，同时也可以搭配风格使用门厅满足功能以外，可以利用做海报墙或者照片墙，实现进门第一眼的仪式感《挂画和装饰品，拯救空白墙》门厅最容易忽视的就是防盗门的垂直空间利用，因为防盗门都是金属，这里就可以采用磁吸挂件满足各种悬挂收纳…2.过道垂直墙面利用无需功能性的装饰，例如过道背景以及两侧墙面，都可以通过摆件或者挂画的形式，让过道空间更温馨和有层次《让你的家更有格调！10种过道背景值得借鉴》利用过道墙面实现绘本以及杂志收纳，满足功能，同时还能兼顾颜值《别再小看杂志架了！它可是家居界的颜值担当！》过道墙面乐高墙或者照片墙布局，也是非常常见的做法，装饰了空间，满足了功能和仪式感《拯救空白墙，乐高墙+黑板墙搞定》过道墙面也可以采用洞洞板满足一部分收纳，同时也可以提升空间层次《过道巧收纳，洞洞板助力，美观实用两不误》过道墙面也可以满足一个手办展示区《各种手办展示，拯救空白墙》利用过道尽头背景或者拆墙实现书架的功能，也是常见做法，满足家里的图书收纳，同时可以满足过道的视觉层次《没有地方放书？过道秒变实用书柜！》利用过道实现壁龛功能，同时满足收纳，同时也合理利用了垂直空间《过道也可以实现壁龛，美观也实用》
…3.客厅垂直空间的利用客厅一面墙做成涂鸦墙，既满足了功能，又能作为装饰空间的作用《拯救空白墙，乐高墙+黑板墙搞定》客厅空白墙面，采用墙挂系统满足一个展示和置物功能，功能和颜值都可以兼顾《除过收纳柜，客厅垂直墙面怎么置物？》利用沙发背景洞洞板满足置物以及空间装饰层次，也可以满足展示功能《家居收纳，客厅洞洞板利用》客厅与阳台打通以后，利用垂直空间满足猫爬架的布局，同时沙发上头也可以做猫咪活动的隔板，合理利用垂直空间利用客厅墙面实现壁龛的收纳和展示功能，同时满足空间视觉层次《不浪费一寸空间！客厅壁龛设计攻略》客厅垂直墙面也可以利用起来满足盲盒的展示功能《各种手办展示，拯救空白墙》…4.餐厅垂直空间利用
餐厅墙面隔板做法非常常见，满足展示以及少量零碎的精致收纳餐厅有空白墙面，也可以利用起来满足家里手办盲盒的展示，同时提升了空间层次餐厅墙面也可以满足一个杂志架的收纳，同时满足视觉上的丰富《别再小看杂志架了！它可是家居界的颜值担当！》也可以利用餐厅墙面实现壁龛的收纳和展示，非常实用，颜值也高《餐厅壁龛，满足功能，提升颜值》…5.卧室书房墙面的垂直利用

Natural-Language Policy Violations

Medium

• Category: Not specified by scanner
• Confidence: 94% confidence

Finding

This markdown file contains user-facing instructional content only in Chinese, which can violate a language/locale policy when no user opt-in or alternative language option is provided. The text does not indicate that the skill is intended only for a Chinese-speaking or region-specific audience.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

• Category: Not specified by scanner
• Confidence: 95% confidence

Finding

The entire skill content is written only in Chinese and provides no indication that the user can choose another language or that the skill is intentionally limited to a Chinese-speaking or region-specific audience. Under the policy, forcing a specific language without opt-in is a natural-language policy violation.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

• Category: Not specified by scanner
• Confidence: 90% confidence

Finding

The entire skill content is written only in Chinese and does not provide any indication that language choice is optional or that the skill is intentionally limited to a Chinese-speaking or region-specific audience. Under the stated policy, forcing a specific language without user opt-in is a natural-language policy concern.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

• Category: Not specified by scanner
• Confidence: 98% confidence

Finding

The entire skill content is written in Chinese and provides no indication that users can choose another language or locale. Under the policy, forcing a specific language without user opt-in is a natural-language policy violation unless the constraint is explicitly documented and justified.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

• Category: Not specified by scanner
• Confidence: 98% confidence

Finding

The entire skill content is presented only in Chinese and does not offer any language selection or indicate that the locale restriction is optional. Under the policy for natural-language violations, forcing a specific language without user opt-in is reportable unless the locale constraint is clearly documented and justified.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

• Category: Not specified by scanner
• Confidence: 93% confidence

Finding

This markdown file presents all user-facing instructions and explanations in a single language, which can violate language/locale policy when no opt-in or alternative is offered. There is no indication that the skill is intentionally region-specific or that users can choose their preferred language.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

• Category: Not specified by scanner
• Confidence: 98% confidence

Finding

This markdown file presents all instructions and guidance exclusively in Chinese, with no indication that the user can choose another language or that the locale restriction is intentional and justified. Under the policy, forcing a specific language without user opt-in is a natural-language policy violation.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

• Category: Not specified by scanner
• Confidence: 94% confidence

Finding

This markdown file contains user-facing instructional content exclusively in Chinese, and there is no indication that the skill is region-specific or that users can opt into this language. Under the policy, forcing a specific language without user choice can be a natural-language policy violation.

Content

No source excerpt is available for this finding.

Missing User Warnings

Medium

• Category: Not specified by scanner
• Confidence: 93% confidence

Finding

The content gives step-by-step DIY repair guidance for loose or hollow tiles, including use of a knife, cement slurry, and handling tiles that may be unstable, but it does not provide a prominent safety warning about cuts, falling wall tiles, dust exposure, eye protection, gloves, or when not to attempt repair. In a home-renovation skill, users are likely to act directly on these instructions, which increases the chance of injury or unsafe repair attempts, especially for wall tiles with detachment risk.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

• Category: Not specified by scanner
• Confidence: 95% confidence

Finding

The entire skill content is presented only in Chinese, with no indication that the user can choose another language or that the skill is intentionally limited to a Chinese-speaking locale. Under the policy, a fixed language/locale without opt-in or clear justification is a natural-language policy violation.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

• Category: Not specified by scanner
• Confidence: 93% confidence

Finding

The document presents all guidance exclusively in Chinese and does not indicate that users may choose another language or locale. Under the policy rule for natural-language violations, forcing a specific language without user opt-in is a reportable issue.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

• Category: Not specified by scanner
• Confidence: 89% confidence

Finding

The text explicitly anchors recommendations to '西安地区' and throughout the document repeatedly frames advice as applying to '北方' versus '南方', but it does not clearly state that the guidance is region-specific or ask the user to confirm their location before applying it. This can violate language/locale policy expectations because users outside that locale may receive prescriptive advice that is not appropriate for their region.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

• Category: Not specified by scanner
• Confidence: 93% confidence

Finding

This markdown content forces a specific language/locale experience for users by presenting all instructions in Chinese with no opt-in, alternative language, or explanation that the skill is region-specific. The policy explicitly calls for flagging language or locale constraints when they are imposed without user choice or documented justification.

Content

No source excerpt is available for this finding.

Missing User Warnings

Medium

• Category: Not specified by scanner
• Confidence: 95% confidence

Finding

The content advises readers to apply oxalic acid to interior walls after drying, but provides no warning about PPE, ventilation, dilution, incompatibilities, or risks to skin, eyes, and adjacent materials. In a home-renovation skill aimed at non-experts, this omission can plausibly lead users to perform hazardous chemical handling or damage surfaces while attempting remediation.

Content

No source excerpt is available for this finding.

Missing User Warnings

Medium

• Category: Not specified by scanner
• Confidence: 96% confidence

Finding

The passage recommends scraping affected wall areas and using oxalic acid or specialized chemical removers, again without warning about dust inhalation, possible mold exposure, acid handling, or substrate damage. Because the skill is a practical construction guide for end users, the lack of precautions makes unsafe DIY remediation more likely rather than being a purely theoretical mention.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

• Category: Not specified by scanner
• Confidence: 97% confidence

Finding

This markdown file contains user-facing instructions exclusively in Chinese, and there is no indication that the skill is limited to Chinese-speaking users or a China-specific context. Under the language/locale policy, forcing a specific language without user opt-in is a natural-language policy violation.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

• Category: Not specified by scanner
• Confidence: 93% confidence

Finding

The entire skill content is presented only in Chinese, with no indication that language selection is user-configurable or that the file is intended solely for a Chinese-language or region-specific audience. Under the stated policy, forcing a specific language without opt-in is a natural-language policy violation.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

• Category: Not specified by scanner
• Confidence: 94% confidence

Finding

The entire skill content is written only in Chinese and does not provide any indication that language choice is optional or that the skill is intentionally limited to a Chinese-speaking audience. Under the stated policy, forcing a specific language without user opt-in is a natural-language policy violation.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

• Category: Not specified by scanner
• Confidence: 96% confidence

Finding

This markdown content forces a specific language/locale experience for users through all headings and instructions, and there is no opt-in, alternative language option, or stated region-specific justification. Under the policy, language constraints are only acceptable when choice or clear justification is provided.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

• Category: Not specified by scanner
• Confidence: 90% confidence

Finding

The entire skill content is presented only in Chinese, and there is no indication that the skill is region-specific or that users may choose another language. Under the stated policy, forcing a specific language without opt-in can be a natural-language policy violation.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

• Category: Not specified by scanner
• Confidence: 91% confidence

Finding

The entire skill file is written only in Chinese and provides no indication that language selection is optional or that the content is intentionally limited to a Chinese-speaking audience. Under the policy rule, forcing a specific language without user opt-in can be a natural-language policy violation.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

• Category: Not specified by scanner
• Confidence: 94% confidence

Finding

The entire skill content is written only in Chinese and provides no indication that users may choose another language or that the skill is intentionally limited to a Chinese-speaking audience. Under the stated policy, forcing a specific language without user opt-in is a natural-language policy violation.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

• Category: Not specified by scanner
• Confidence: 93% confidence

Finding

The entire skill file content is written in Chinese and presents the material exclusively in that language, with no indication that users can opt into another language or that the skill is intentionally limited to a Chinese-speaking or region-specific context. Under the policy rule, forcing a specific language without user choice is a natural-language policy violation.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.