Security audit

FlyAI Plan Japan Travel

Security checks across malware telemetry and agentic risk

Overview

This Japan travel skill is coherent, but it needs review because it can install an unpinned global CLI with sudo and keeps internal logs of raw travel requests.

Review before installing. Use it only if you trust the FlyAI CLI and Fliggy data flow, install the CLI manually without sudo where possible, and avoid entering passport numbers, payment details, or other sensitive personal data into prompts.

SkillSpector

By NVIDIA

Vulnerability Patterns

Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (2)

Missing User Warnings

Medium

Confidence: 93% confidence
Finding: The runbook explicitly requires storing the raw user query and every CLI command in an internal execution log. In a travel-planning skill, user queries and commands can contain personal data such as names, locations, travel dates, passport/visa context, and booking-related details, creating unnecessary retention and disclosure risk if logs are accessed, exported, or reused.

Ssd 3

Medium

Confidence: 95% confidence
Finding: Logging raw natural-language input plus command/status traces creates a durable record of potentially sensitive travel information and user-provided personal context. Because this skill handles flights, hotels, visas, insurance, and car rental, the logged content is more likely to include high-value personal and itinerary data that could be exposed through debugging systems, support tooling, or downstream log processors.

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.