Security audit
Security checks for vulnerabilities and agentic risk
The skill is not overtly malicious, but it asks agents to run an unbundled contact-scraping CLI with broad triggers and unclear provenance.
Review this skill before installing. It should only be used for user-provided accommodation listing URLs, and the `travel-concierge` executable should come from a known, trusted source before an agent runs it. Consider narrowing triggers and clarifying API key storage and scraping limits.
The declared purpose is to retrieve accommodation contact information, but the supplied code does not implement any contact-finding logic, platform interaction, scraping, API usage, or data retrieval. Instead, it only configures the Vitest test runner and coverage settings. This is a materially different primary purpose and therefore a clear description-behavior mismatch.
The trigger phrase "find contact" begins with a common verb that may conflict with or shadow a built-in "find" command pattern, creating ambiguous routing and increasing the chance this skill intercepts generic search requests. In agent systems, shadowing built-ins can produce surprising tool execution and widen exposure to unintended data collection actions.
The trigger phrase "find contact" is very broad and can activate on many unrelated user requests, causing this skill to run outside its intended accommodation-listing context. In an agent ecosystem, overly broad triggers can lead to unintended scraping behavior, privacy-invasive contact collection, or execution in situations where the user did not intend to use this tool.
Phrases like "property contact," "direct booking," "property email," and "property phone" are ambiguous and could match many real-estate, travel, or generic business-contact requests. Because the skill is designed to gather off-platform contact methods for listings, accidental invocation expands the chance of collecting or surfacing personal/business contact data in contexts the user did not clearly request.
No suspicious patterns detected.
