ClawHub
Back to skill

Security audit

Планировщик поездки в Китай

Security checks for vulnerabilities and agentic risk

Overview

This China travel-planning skill sends travel queries to a disclosed proxy and TripGenie service, which fits its purpose and does not show hidden or destructive behavior.

Install this only if you are comfortable sending your travel questions, dates, destinations, budgets, and preferences to the skill publisher's proxy and TripGenie. Avoid entering sensitive personal details beyond what is needed for trip planning, and expect booking links may include affiliate handling.

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (3)

Lp3

Medium
Category
MCP Least Privilege
Confidence
91% confidence
Finding
The skill declares only the bash tool, but its documented behavior clearly sends user requests to an external proxy server and TripGenie API, which is network-capable behavior not transparently declared in permissions. This creates a trust and review gap: users and platform reviewers may not realize itinerary queries, travel preferences, and related data are transmitted off-platform to third parties.

Natural-Language Policy Violations

Medium
Confidence
79% confidence
Finding
The skill instructs the agent to always force `--locale=ru`, regardless of the user's actual language preference. While not a classic security flaw, this can cause unintended disclosure or mishandling of content in a language the user did not request, and it removes user control over output formatting and localization.

Missing User Warnings

Medium
Confidence
95% confidence
Finding
The script sends user-supplied travel queries and locale to a remote proxy service without any user-facing disclosure or consent mechanism. Travel queries can contain sensitive itinerary details, dates, locations, budgets, and preferences, so silent transmission to a third party creates a privacy and data-handling risk, especially because the service is an external proxy rather than a clearly local function.

Static analysis

No suspicious patterns detected.