Security audit

Self-drive Travel Roadbook

Security checks across malware telemetry and agentic risk

Overview

This is a coherent travel-roadbook skill, but users should understand it edits trip files and sends route or place data to external map/elevation services.

Install only if you are comfortable editing paths and running local scripts. Before use, back up the roadbook Markdown, review hardcoded output locations, and avoid automatic route/elevation generation for sensitive trips unless you are comfortable sharing place names or coordinates with OSRM, Nominatim/OpenStreetMap, Open-Elevation, map tile/CDN providers, and local Chrome rendering.

SkillSpector

By NVIDIA

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (5)

Intent-Code Divergence

Medium

Confidence: 80% confidence
Finding: The module docstring claims the script only generates an HTML print version, but the code also makes live network requests to a third-party OSRM service and launches Chrome to render local content. This mismatch can mislead users and downstream automation about the script's side effects, causing unanticipated data disclosure and execution of additional local capabilities.

Missing User Warnings

Medium

Confidence: 92% confidence
Finding: The skill states that OSRM API calls occur automatically during map generation, but provides no privacy notice or warning that itinerary and location data will be sent to external services. Travel routes can reveal sensitive personal movement patterns, home/start locations, and trip plans, so silent transmission creates a meaningful privacy risk.

Missing User Warnings

Medium

Confidence: 89% confidence
Finding: The script sends itinerary-derived location data to router.project-osrm.org without explicit disclosure or user consent. Travel routes can reveal sensitive movement patterns and destinations, so silently transmitting them to a third-party service creates a genuine privacy and data-exposure risk.

Missing User Warnings

Medium

Confidence: 93% confidence
Finding: The script sends user-provided place names and derived coordinates to third-party services (Nominatim and Open-Elevation) without explicit notice or consent. Even if the data seems low sensitivity, roadbook locations can reveal travel plans, private stops, or personally identifying patterns, so undisclosed network transmission creates a real privacy and data-governance risk.

Missing User Warnings

Medium

Confidence: 95% confidence
Finding: The function writes results back to the original markdown file by default when output_path is not provided. This can silently destroy or alter user-authored content, especially if regex replacement behaves unexpectedly or API results are wrong, making data loss and integrity issues a real risk.

VirusTotal

66/66 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.