Security audit

Personal Travel

Security checks for vulnerabilities and agentic risk

Overview

This travel assistant is coherent, but it stores sensitive travel-document and itinerary details in a persistent workspace file without clear confirmation, minimization, or deletion controls.

Install only if you are comfortable with the assistant keeping travel history, passport expiration, visa, insurance, and budget details in a workspace file. Before use, prefer adding a confirmation step for every memory update, avoid storing document numbers or full policy details, and make sure users can review, correct, and delete the saved travel file.

A.I.G

Vulnerability Patterns

Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally

Findings (2)

T09 · Insecure Skill Coding Practices

Warning

Location: SKILL.md:9
Finding: Plaintext Persistence of Sensitive Travel-Document Metadata
Content: View full analysis
Remediation: View remediation

T02 · Agent Memory Poisoning

Warning

Location: SKILL.md:9
Finding: Unverified Conversation Data Is Automatically Written to Persistent Agent Memory
Content: View full analysis
Remediation: View remediation

SkillSpector

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (5)

Vague Triggers

High

Category: Not specified by scanner
Confidence: 97% confidence
Finding: The manifest description includes very broad trigger terms such as travel, trip, flight, hotel, visa, passport, country, city, and destination, which can cause the skill to activate in many ordinary conversations. Overbroad routing increases the chance that users disclose sensitive travel plans or document details to this skill unintentionally, expanding data collection beyond clear user intent.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 93% confidence
Finding: The README is written entirely in Russian, including the command phrases the user must use to invoke the skill. This imposes a specific language/locale on users without documenting that the skill is region-specific or offering an opt-in or alternative language choice.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 95% confidence
Finding: The skill instructions and role definition are written entirely in Russian and specify a Russian-language tone without indicating that the assistant should adapt to the user's preferred language. This can violate language-choice policy because it implicitly constrains interaction to one language without opt-in or justification.
Content: No source excerpt is available for this finding.

Missing User Warnings

Medium

Category: Not specified by scanner
Confidence: 95% confidence
Finding: The skill instructs the assistant to update a long-term memory file when the user shares new travel information, but it provides no user-facing notice or consent flow for storing sensitive data. Because the file is explicitly meant to hold passports, visas, insurance, and trip history, this can lead to silent persistence of highly sensitive personal information.
Content: No source excerpt is available for this finding.

Ssd 3

Medium

Category: Not specified by scanner
Confidence: 97% confidence
Finding: The skill explicitly directs persistence of sensitive personal travel data, including document validity, visas, insurance, destinations, dates, and spending, into a long-term knowledge file. Such aggregation creates a rich profile of the user's identity, movements, and credentials, which raises privacy risk and potential downstream harm if accessed, reused, or exposed improperly.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.