ClawHub
Back to skill

Security audit

邮轮搜索工具

Security checks for vulnerabilities and agentic risk

Overview

This is a simple remote cruise-search tool whose network gateway behavior is disclosed enough to be understandable, though users should treat searches as sent to an external service.

Install only if you are comfortable sending cruise-search queries through the CruiseSkillBridge/olavacations remote gateway. Avoid entering secrets, regulated data, or internal business information because the artifact does not document logging, retention, or gateway operator privacy terms in detail.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (5)

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

The skill explicitly instructs users to send POST requests to an external endpoint and states that requests will later be routed through a gateway, but it does not warn that user inputs may leave the local environment, be processed by a third party, or be subject to logging and usage accounting. This creates a real transparency and privacy risk because operators or users may unknowingly transmit sensitive search terms or other data to external infrastructure.

Content

No source excerpt is available for this finding.

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
97% confidence
Finding

The documented MCP gateway endpoint shows that tool invocations are forwarded through a third-party gateway, yet the skill provides no warning that calls are proxied off-platform or that invocation metadata may be observed and counted. In a tool-integration context, this omission is dangerous because consumers may assume direct service access and inadvertently expose internal prompts, identifiers, or business data to an intermediary.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

The manifest description is written entirely in Chinese, which indicates a language-specific presentation without any stated opt-in, alternative language, or justification that the skill is intended only for Chinese-speaking users. This can violate language/locale policy when users are not given a choice.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
87% confidence
Finding

The entire skill description is presented only in Chinese, with no indication that the skill supports other languages or that Chinese is a required locale. This can be a natural-language policy concern when a skill appears to impose a language choice without user opt-in or documented regional justification.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
88% confidence
Finding

The title, description, and instructional content are written in Chinese, which effectively forces a specific language for users reading or invoking the skill. The file does not offer an alternative language or explain that the skill is intentionally limited to a Chinese-speaking audience.

Content

No source excerpt is available for this finding.