Ae1
High
- Category
- analysis-evasion
- Confidence
- 100% confidence
- Finding
Referenced artifact was not completely inspected
- Content
md - `SKILL.md` - Complete documentation (this file)
Security audit
Travel Festival Event Strategist
Security checks for vulnerabilities and agentic risk
Overview
This skill is a low-risk descriptive travel-planning helper with no evidence of hidden access, persistence, network use, or data mutation.
Safe to install if you want a descriptive festival/event travel planning helper. Treat its recommendations as planning heuristics only and verify dates, tickets, prices, weather, safety advisories, and booking details with official sources before acting.
Vulnerability Patterns
- Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
- Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
- Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
- Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
- Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
- Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
- MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (6)
Undeclared Tool Scope
Medium
- Category
- MCP Least Privilege
- Confidence
- 70% confidence
- Finding
Without declared permissions the skill's intent is opaque and cannot be validated.
- Content
Vague Triggers
Medium
- Category
- Not specified by scanner
- Confidence
- 91% confidence
- Finding
The trigger phrases are broad enough to match ordinary travel-planning requests, which can cause the skill to activate outside its intended scope. Over-broad activation increases the chance of prompt-routing hijack, unintended data exposure to the skill context, or the model applying festival-specific heuristics when the user did not request them.
- Content
Vague Triggers
Medium
- Category
- Not specified by scanner
- Confidence
- 87% confidence
- Finding
The example prompts use generic wording like 'help me' and 'provide framework,' which overlaps with many non-specialized travel requests. This can make auto-selection or invocation ambiguous, causing the skill to over-trigger and potentially override more appropriate skills or inject irrelevant guidance into unrelated workflows.
- Content
Natural-Language Policy Violations
Low
- Category
- Not specified by scanner
- Confidence
- 71% confidence
- Finding
The manifest sets
language: en, but later sections include Chinese-language usage scenarios, creating ambiguity about whether the skill is intended to operate only in English or supports other languages. This can conflict with language/locale policy expectations unless multilingual behavior is explicitly offered as a user choice or clearly documented.- Content
Natural-Language Policy Violations
Low
- Category
- Not specified by scanner
- Confidence
- 95% confidence
- Finding
The manifest sets the skill language to "en" with no indication that users can opt into other languages or that the restriction is required for a region-specific purpose. This is a natural-language policy concern because it imposes a locale choice unilaterally in the skill configuration.
- Content
Static analysis
No suspicious patterns detected.