Flight Tracker for Airports in Asia Pacific

• Outcome: Pass
• Latest audit: Sep 12, 2026 · 2:54 AM UTC
• Version: 1.0.1

Overview

This skill is a straightforward flight schedule lookup tool that uses a disclosed Aviationstack API key and sends only route lookup data to expected flight services.

Install only if you are comfortable creating an Aviationstack API key and sending route searches plus that key to Aviationstack over HTTPS. Keep ~/.openclaw/.env private and do not commit it to source control.

A.I.G

Vulnerability Patterns

• Skill Instruction Hijacking: Alters the agent's session goals or safety constraints when the skill loads
• Agent Memory Poisoning: Writes attacker-controlled rules into memory that affect later sessions
• Remote Payload Retrieval and Execution: Fetches external code whose behavior can change after review
• Embedded Malicious Code: Ships malicious scripts inside the skill and executes them locally
• Unauthorized Access and Privilege Escalation: Obtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Rogue Agent: Self-Modification, Session Persistence
• MCP Least Privilege: Underdeclared Capability, Wildcard Permission, Missing Permission Declaration
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands

Findings (6)

Credential Access

High

• Category: Privilege Escalation
• Confidence: 60% confidence

Finding

Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

Content

Scanner excerpt · SKILL.md (reported line 61)May include surrounding context.

3. Open this file on your machine:

bash

~/.openclaw/.env

4. Add this line:

Credential Access

High

• Category: Privilege Escalation
• Confidence: 60% confidence

Finding

Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

Content

Scanner excerpt · SKILL.md (reported line 73)May include surrounding context.

3. Open this file on your machine:

bash

~/.openclaw/.env

4. Add this line:

Undeclared Tool Scope

Medium

• Category: MCP Least Privilege
• Confidence: 93% confidence

Finding

The skill explicitly requires environment access for AVIATIONSTACK_API_KEY and network access to Aviationstack and fallback sites, but it does not declare a restrictive tool scope such as permissions or allowed-tools. In an agent framework, missing scope boundaries can let the runtime grant broader capabilities than the skill actually needs, increasing the blast radius if the skill is misused or combined with prompt injection elsewhere.

Content

No source excerpt is available for this finding.

Session Persistence

Medium

• Category: Rogue Agent
• Confidence: 60% confidence

Finding

Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.

Content

Scanner excerpt · SKILL.md (reported line 56)May include surrounding context.

md

## API key setup

1. Create a free account at Aviationstack.
2. Copy your API access key from the Aviationstack dashboard.
3. Open this file on your machine:

Sudo/Root Execution

Medium

• Category: Privilege Escalation
• Confidence: 80% confidence

Finding

Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.

Content

Scanner excerpt · SKILL.md (reported line 73)May include surrounding context.

5. Restrict the file so only your user can read it:

bash

chmod 600 ~/.openclaw/.env

File layout

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 60% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · scripts/schedule.py (reported line 225)May include surrounding context.

python

def get_aviationstack_schedule(origin, dest, api_key):
    base_url = "https://api.aviationstack.com/v1/flights"
    params = {
        "access_key": api_key,
        "dep_iata": origin,

Static analysis

No suspicious patterns detected.