ClawHub
Back to skill

Security audit

Visa

Security checks for vulnerabilities and agentic risk

Overview

This visa skill is narrow and incomplete, but the inspected artifacts do not show hidden execution, exfiltration, privilege abuse, or destructive behavior.

Before installing, treat this as a basic visa-type helper, not a full application tracker. Do not rely on it for current legal requirements or immigration advice, and verify visa rules with official government or consular sources. If future versions add local tracking, be mindful that visa application details and document status can be sensitive even when stored locally.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (1)

Tp4

High
Category
MCP Tool Poisoning
Confidence
96% confidence
Finding

The description promises a broader visa application guidance workflow, including document tracking, timeline management, interview preparation, and status tracking. The supplied code only performs a narrow, simplified visa-type recommendation based on travel purpose and prints general advisory text. Although 'identifies correct visa type' is partially aligned, the primary declared scope is materially broader than the actual implementation. There is no evidence of document management, saved tracking data, interview preparation logic, or status monitoring. Therefore the description does not accurately represent what this code chunk actually does.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.