Security audit

装修验收指南

Security checks for vulnerabilities and agentic risk

Overview

This Chinese renovation-inspection skill is mostly coherent and non-executable, but it includes some unsafe DIY home-repair guidance that users should review before installing.

Install only if you want Chinese-language renovation inspection guidance, and treat it as homeowner education rather than a construction manual. Do not follow any instructions involving flames, grinders, demolition, cement handling, electrical, gas, waterproofing, or structural work without appropriate PPE, local-code checks, and qualified professionals.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (37)

Missing User Warnings

Medium

Category: Not specified by scanner
Confidence: 83% confidence
Finding: The document gives concrete procedural guidance for wall removal, scraping, and grinder use, while relying mainly on a brief introductory warning. In a consumer-facing home-renovation skill, this can encourage untrained users to attempt hazardous structural or dust-producing work based on partial instructions, creating risks of injury, silica dust exposure, or unsafe modification of building elements.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 95% confidence
Finding: This markdown file presents all user-facing content exclusively in Chinese, and there is no indication that the skill is intended only for a Chinese-speaking or region-specific audience. Under the language/locale policy, forcing a specific language without user opt-in can be a natural-language policy violation.
Content: No source excerpt is available for this finding.

Missing User Warnings

Medium

Category: Not specified by scanner
Confidence: 95% confidence
Finding: The content gives step-by-step DIY instructions for cutting grout lines and handling a thin cement slurry but does not clearly warn about dust inhalation, cement eye exposure, skin irritation/alkali burns, or the need for gloves and eye protection. In a home-repair guidance skill aimed at non-professionals, users may directly follow the procedure and suffer preventable respiratory, eye, or skin injuries.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 89% confidence
Finding: The entire skill content is written only in Chinese and does not offer any language or locale choice, opt-in, or justification for being region-specific. Under the policy, a skill that effectively requires a specific language without user opt-in can constitute a natural-language policy violation.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 93% confidence
Finding: The entire skill is written only in Chinese and provides no indication that users may choose another language or locale. Under the stated policy, forcing a specific language without user opt-in is a natural-language policy violation unless the locale constraint is explicitly documented and justified.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 97% confidence
Finding: The file presents all instructional content in Chinese and does not indicate that users may choose another language or that the skill is intended only for a Chinese-speaking or region-specific audience. Under the policy rule, forcing a specific language without user opt-in is a natural-language policy violation.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 94% confidence
Finding: This file presents all guidance only in Chinese and does not provide any user opt-in, alternative language, or justification for a Chinese-only locale constraint. Under the policy, forcing a specific language without user choice is a natural-language policy violation.
Content: No source excerpt is available for this finding.

Missing User Warnings

Medium

Category: Not specified by scanner
Confidence: 96% confidence
Finding: The document instructs users to use a lighter to test for window air leaks without any localized warning about fire, burns, nearby combustibles, curtains, gas residues, or safer alternatives. In a home-inspection and renovation context, users may perform this indoors around flammable materials, making the advice unsafe and reasonably likely to cause harm.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 92% confidence
Finding: This markdown file presents all instructional content in a single language and does not indicate that the user can choose another language or that the skill is intended only for a Chinese-speaking audience. That can violate language/locale policy when a skill implicitly forces one language without user opt-in.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 90% confidence
Finding: The entire skill specification mandates Chinese-language behavior through its title, examples, tone guidance, and response format, but it does not offer the user any language or locale choice. Under the policy, forcing a specific language without opt-in is a natural-language policy violation unless the regional constraint is clearly documented and justified.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 78% confidence
Finding: The document repeatedly frames recommendations as applicable to '北方' and cites '西安地区' as the example baseline, but it does not clearly prompt users outside that locale to verify local codes or switch to region-appropriate guidance. This can be read as a locale-specific default without explicit opt-in or a clearly bounded regional-only scope.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 91% confidence
Finding: This file presents all user-facing content in a single language and does not offer any alternative language option or note that the content is intended only for a Chinese-speaking audience. Under the policy, forcing a specific language without user opt-in can be a natural-language policy violation.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 93% confidence
Finding: The entire document is written only in Chinese and provides no indication that users may choose another language or that the content is intentionally limited to a Chinese-speaking or region-specific audience. Under the stated policy, forcing a specific language without opt-in can be a natural-language policy violation.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 83% confidence
Finding: The text explicitly states '今天主要给北方业主说的', restricting the guidance to a northern-region audience without presenting it as an optional or clearly justified locale choice. This is a natural-language locale constraint and could conflict with policies requiring user choice or explicit justification for regional targeting.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 96% confidence
Finding: The entire skill content is written only in Chinese and provides no indication that users may choose another language or locale. Under the stated policy, forcing a specific language without user opt-in can be a natural-language policy violation unless the locale restriction is explicitly justified.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 79% confidence
Finding: The text repeatedly frames guidance as specific to '西安市场' and local construction practices, while presenting the advice as generally applicable without clearly limiting scope or offering locale-specific alternatives. This can be a policy concern because it defaults users to one regional standard and workflow without explicit opt-in or a clearly bounded region-specific tool description.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 90% confidence
Finding: This markdown file contains user-facing instructional content exclusively in Chinese, and there is no indication that the user can choose another language or that the locale restriction is required. Under the policy rule for natural-language violations, forcing a specific language without opt-in is a reportable issue.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 93% confidence
Finding: This file’s natural-language content is wholly Chinese and does not indicate that the skill is region-specific or that users may choose another language. Under the policy rule, forcing a specific language without user opt-in can be a locale-policy violation.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 97% confidence
Finding: The file's natural-language instructions are presented only in Chinese, and there is no indication that the skill is region-specific or that users can opt into this language. Under the language/locale policy, forcing a specific language without user choice can be a policy violation.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 79% confidence
Finding: The entire skill content is written only in Chinese and provides no indication that users can choose another language or that the skill is intentionally limited to a Chinese-speaking or region-specific audience. Under the policy, a language or locale constraint without opt-in or justification can be a natural-language policy violation.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 91% confidence
Finding: This markdown file contains user-facing natural language content exclusively in Chinese and does not provide an opt-in, alternative language, or justification for a language restriction. Under the stated policy, forcing a specific language without user choice can be a locale/language policy violation.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 97% confidence
Finding: SQP-3 applies to all file types and covers language or locale policy violations in natural language. This markdown content presents all instructions and guidance exclusively in Chinese, with no opt-in, alternative language, or indication that the skill is intentionally limited to a Chinese-speaking audience.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 90% confidence
Finding: SQP-3 applies to all file types and includes language or locale policy violations. This reference content presents all user-facing natural language solely in Chinese and does not indicate that the user can choose another language or that the locale restriction is documented as region-specific.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 88% confidence
Finding: This markdown file contains user-facing natural-language content only in Chinese, and there is no indication that the skill is region-specific or that users may choose another language. Under the stated policy, forcing a specific language without opt-in can be a natural-language policy violation.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 91% confidence
Finding: The entire skill content is presented only in Chinese and does not indicate any language choice or opt-in. Under the policy criteria, language-specific content can be a natural-language policy issue when it implicitly forces a locale without user selection or documented justification.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.