ClawHub
Back to skill

Security audit

Travel Guide Test

Security checks for vulnerabilities and agentic risk

Overview

This skill is a coherent travel-planning and travel-guide publishing helper, with privacy considerations around optional reusable traveller profiles.

Install this if you want a travel-planning assistant that can also package the plan as a static Cloudflare Pages guide. Before allowing profile saves, confirm what traveller details will be retained and avoid storing unnecessary sensitive information.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Vague Triggers

Medium
Confidence
91% confidence
Finding
The manifest description says to use the skill when a user wants help 'deciding where to go, comparing route/base options, shaping an itinerary around interests and constraints, choosing hotels and activities' before mentioning webpage deployment. These are broad, everyday travel-assistance scenarios rather than narrowly scoped activation conditions, which could cause the skill to trigger for general trip-planning conversations even when webpage creation or Cloudflare Pages deployment is not desired.

Missing User Warnings

Medium
Confidence
93% confidence
Finding
The skill explicitly supports creating, reusing, and updating traveller profiles and storing durable preferences, but it does not require a clear user-facing notice at the point of collection that information may persist. In a travel context, those preferences can include children’s ages, mobility constraints, food restrictions, and recurring group details, creating privacy risk if users do not understand that data may be retained across sessions.

Static analysis

No suspicious patterns detected.