ClawHub

China Travel Guide

Security checks across malware telemetry and agentic risk

Overview

This is an instruction-only China travel guide with purpose-aligned travel, translation, payment, transport, and emergency reference content, but users should verify time-sensitive guidance.

Safe to install as a travel reference skill. Treat visa, hospital, emergency, payment-limit, attraction-booking, and transport details as starting points because some embedded data is time-sensitive; verify critical items with official sources before acting. Use travel-specific prompts where possible, and upload only the specific menus, signs, medicine labels, or documents needed for translation.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (3)

Vague Triggers

Medium
Confidence
94% confidence
Finding
The trigger phrase "help" is extremely generic and can cause this travel skill to activate in many unrelated conversations. That creates routing confusion and can surface travel-specific guidance, emergency instructions, or tool use in contexts where the user did not intend to invoke this skill.

Vague Triggers

Medium
Confidence
92% confidence
Finding
The trigger "emergency" is also overly broad and may match non-travel emergencies or unrelated safety discussions. In a high-stakes context, accidental activation can misroute the user away from the correct domain workflow and present incomplete or misleading emergency advice.

Vague Triggers

Medium
Confidence
95% confidence
Finding
The emergency module repeats the same broad activators, increasing the chance that generic requests like "help" or "emergency" invoke this skill without clear China-travel context. Because this module contains urgent-response instructions, false activations are more risky than in a purely informational section.

VirusTotal

63/63 vendors flagged this skill as clean.

View on VirusTotal