Caveat verdict
chimney-sweep-fireplace-kit
Pure marketing content generation toolkit for chimney sweep contractors with no code execution, no network calls, and no credential access — it provides domain-specific compliance guidance for generating marketing copy.
⚠ Flagged for review — coarse, uncorroborated signal, not a confirmed exploit. Review the config yourself before installing.
Automated static analysis — not a human review. Caveat flags capabilities, not confirmed intent, and can produce false positives. Disagree with this verdict? Use Dispute below.
Findings (1)
Possible hardcoded credential
prompts/02-service-pages-chimney-schema.md · code · credential: "A Level II inspection report carries more weight in a real estate t
Permissions & capabilities
No declared permissions — minimal attack surface.
Is this flag fair?
Thanks — recorded.