other
Warning
- Location
server.json:5- Finding
Unverifiable and Mutable Third-Party MCP Trust Boundary
- Content
View full analysis
- Remediation
View remediation
Security audit
Csb Clawhub 4bQvr2
Security checks for vulnerabilities and agentic risk
Overview
The skill appears intended for luxury cruise recommendations, but it relies on an undocumented third-party remote service, so users should review it before installing.
Install only if you are comfortable sending relevant travel-planning context to the listed third-party MCP service. Avoid sharing secrets, credentials, payment details, or unrelated personal data unless the remote service's privacy and tool behavior are documented and acceptable.
Vulnerability Patterns
- Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
- Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
- Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
- Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
- Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Findings (1)
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (3)
Natural-Language Policy Violations
Medium
- Category
- Not specified by scanner
- Confidence
- 97% confidence
- Finding
The skill description is entirely in Chinese, and the file does not indicate that language is optional, configurable, or required for a region-specific use case. Under the policy, forcing a specific language without user opt-in is a natural-language policy violation.
- Content
Natural-Language Policy Violations
Medium
- Category
- Not specified by scanner
- Confidence
- 95% confidence
- Finding
The manifest and README content are entirely in Chinese, including the primary user-facing description, with no indication that users may interact in other languages or choose a locale. The policy requires avoiding forced language constraints unless there is explicit opt-in or a justified region-specific limitation, neither of which is present here.
- Content
Natural-Language Policy Violations
Low
- Category
- Not specified by scanner
- Confidence
- 92% confidence
- Finding
The description forces a specific language presentation but does not state that the skill is intended only for Chinese-speaking users or offer any language/locale choice. Under the language/locale policy, this is a natural-language policy concern because users may encounter a fixed language without opt-in.
- Content