Ae1
High
- Category
- analysis-evasion
- Confidence
- 100% confidence
- Finding
Referenced artifact was not completely inspected
- Content
md - `SKILL.md` - Complete documentation (this file)
Security audit
Travel Memory Preservation System
Security checks for vulnerabilities and agentic risk
Overview
This skill is a low-risk travel memory planning helper that produces descriptive guidance and does not access files, credentials, network services, or persistent state.
Install this if you want descriptive travel-memory organization help. It should not perform actions for you or fetch live data, so verify real-world travel details yourself; the main caveats are broad trigger wording and minor language/version metadata inconsistencies.
Vulnerability Patterns
- Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
- Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
- Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
- Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
- Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
- Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
- MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
- MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Findings (7)
Undeclared Tool Scope
Medium
- Category
- MCP Least Privilege
- Confidence
- 70% confidence
- Finding
Without declared permissions the skill's intent is opaque and cannot be validated.
- Content
Vague Triggers
Medium
- Category
- Not specified by scanner
- Confidence
- 95% confidence
- Finding
The trigger phrases are broad and include generic terms such as "memory," "sharing," and "if applicable," which can cause the skill to activate in contexts unrelated to travel memory preservation. Overbroad invocation can route unrelated user inputs into this skill, leading to inappropriate handling, confusion, or accidental override of a more suitable skill's safety logic.
- Content
Natural-Language Policy Violations
Medium
- Category
- Not specified by scanner
- Confidence
- 91% confidence
- Finding
The manifest sets the skill language to "en" with no indication that users can opt into another language or that the restriction is required for a region-specific purpose. This is a natural-language policy concern because it imposes a locale choice rather than offering flexibility or documenting justification.
- Content
Natural-Language Policy Violations
Low
- Category
- Not specified by scanner
- Confidence
- 76% confidence
- Finding
This markdown includes one scenario entirely in Chinese and others in English, but it does not explain whether the skill adapts to the user's preferred language or locale. That can create an implicit language policy issue because the skill examples suggest inconsistent language behavior without documented opt-in or selection.
- Content
Natural-Language Policy Violations
Low
- Category
- Not specified by scanner
- Confidence
- 88% confidence
- Finding
The manifest metadata sets
language: en, and the acceptance criteria further state "English documentation primary," which indicates an English-only or English-preferred constraint. The document does not offer a user language choice or explain a justified region-specific need, despite later including a Chinese usage scenario.- Content
Intent-Code Divergence
Low
- Category
- Not specified by scanner
- Confidence
- 86% confidence
- Finding
The module documentation describes the skill as purely descriptive, which implies simple descriptive output. In practice, the code analyzes user input for destinations, timeframe, budget, and memory/journal keywords, then produces tailored recommendations, frameworks, checklists, and next steps.
- Content