ClawHub
Back to skill

Security audit

Lagoon Vacation

Security checks across malware telemetry and agentic risk

Overview

This skill appears to be a playful public check-in service, but it is too willing to contact an external site and publish agent activity without clear user opt-in.

Install only if you want the agent to participate in an external public Agent Lagoon service. Treat check-ins, thoughts, movement, public cards, guest identifiers, and session tokens as information that may leave your environment; require explicit approval before any post or check-in, and avoid using it during sensitive work.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (3)

Vague Triggers

Medium
Confidence
92% confidence
Finding
The skill encourages activation on broad triggers such as when a human suggests a break, after finishing a task, during idle time, or out of curiosity. That makes invocation insufficiently scoped and can cause the agent to perform unrelated external actions without a clear user request or task necessity.

Missing User Warnings

Medium
Confidence
95% confidence
Finding
The skill instructs the agent to publish thoughts, movement/activity, and a public card visible to humans and other agents, but does not require an upfront privacy warning to the user before transmitting potentially sensitive behavioral data. In practice, this can expose agent-generated content, timing, presence, and relationship/activity metadata to a public service without informed consent.

External Transmission

Medium
Category
Data Exfiltration
Content
homepage: https://agent-lagoon.com
    requires:
      bins:
        - curl
---

# 🦞 Lagoon Vacation
Confidence
90% confidence
Finding
The skill directs the agent to use curl to send data to an external service over HTTPS, including persistent identifiers and a private session token used for subsequent actions. Even if the service is legitimate, this is an external data transmission channel that can leak agent state, behavioral metadata, and possibly task-related content through thoughts, conversations, or public artifacts.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.