ClawHub
Back to skill

Security audit

BusLah - Singapore Bus Arrivals

Security checks for vulnerabilities and agentic risk

Overview

This Singapore bus-arrival skill uses disclosed transit and geocoding APIs for its stated purpose and does not show hidden persistence, credential access, or destructive behavior.

Install this if you are comfortable with entered source and destination locations being sent to third-party Singapore transit and geocoding APIs. Avoid using very sensitive personal locations if that sharing is not acceptable.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (2)

Missing User Warnings

Medium
Confidence
95% confidence
Finding
The skill instructs the agent to send user-provided source and destination locations to external geocoding and transit APIs without any notice, minimization, or consent step. Because these locations can reveal sensitive places such as home, office, or religious sites, the skill can expose private user movement data to third-party services even when the user may not expect that disclosure.

Natural-Language Policy Violations

Low
Confidence
77% confidence
Finding
The natural-language description states the skill is for Singapore bus lookups only. This imposes a locale-specific constraint, but the file does not explicitly present it as a user choice or justified locale restriction beyond the title/description.

Static analysis

No suspicious patterns detected.