ClawHub
Back to skill

Security audit

Travel Business Wellness Integrator

Security checks across malware telemetry and agentic risk

Overview

This skill gives general business-travel wellness planning advice and does not show hidden data access, persistence, network use, or unsafe automation.

Install only if you want general planning templates for business-travel wellness. Do not rely on it for medical symptoms, chronic conditions, medications, travel vaccines, or urgent health issues; use a qualified clinician for those cases.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (3)

Missing User Warnings

Low
Confidence
91% confidence
Finding
The skill advertises wellness assessments, jet-lag management, immune support, nutrition, and recovery protocols without any visible disclaimer that it is not medical advice or that users should seek professional help for existing conditions. In a health-adjacent context, users may rely on these recommendations for symptoms or chronic issues, which can lead to harmful self-management or delayed medical care.

Vague Triggers

Medium
Confidence
84% confidence
Finding
The trigger guidance uses broad phrases like business travel, wellness, health considerations, and recovery if applicable, which can cause the skill to activate in loosely related contexts. Overbroad activation increases the chance of unintended invocation, causing the agent to deliver domain-specific health or travel guidance when the user did not explicitly request this skill.

Vague Triggers

Medium
Confidence
86% confidence
Finding
The example prompts include generic formulations such as 'Help me with...' and 'Provide ... framework for travel planning,' which are broad enough to match many unrelated travel requests. This can lead to accidental routing and over-application of the skill's heuristics, especially since the skill touches wellness-adjacent topics that may be mistaken for quasi-medical guidance.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.