ClawHub
Back to skill

Security audit

China Travel Tips

Security checks for vulnerabilities and agentic risk

Overview

This skill is a disclosed China travel helper that sends travel queries to a remote TripGenie proxy, with no evidence of hidden local access, persistence, or destructive behavior.

Install only if you are comfortable sending your travel questions and planning details to the skill's remote proxy and TripGenie. Avoid entering passport numbers, account credentials, exact home addresses, or other highly sensitive personal information.

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Lp3

Medium
Category
MCP Least Privilege
Confidence
91% confidence
Finding
The skill declares only the bash tool and environment variables, but its documented execution path clearly performs outbound network access through a proxy to the TripGenie API. This creates a transparency and governance gap: reviewers and users may not realize external data transfer occurs, including transmission of user queries and use of hidden credentials via the proxy.

Missing User Warnings

Medium
Confidence
94% confidence
Finding
The script sends user-supplied travel queries, including potentially sensitive itinerary, hotel, and travel details, to an external proxy service without any meaningful user-facing disclosure or consent flow. In a travel-planning skill, users may unknowingly expose personal travel patterns, dates, destinations, and preferences to a third-party endpoint, increasing privacy and data-handling risk.

Static analysis

No suspicious patterns detected.