ClawHub
Back to skill

Security audit

travel-city-game(旅行游戏副本生成器)

Security checks across malware telemetry and agentic risk

Overview

This skill appears to match its purpose: it builds a local travel game page from flyai results, with some disclosed preview and optional publishing behavior to be aware of.

Before installing, make sure you trust the flyai CLI because this skill will invoke it and may use FLYAI_API_KEY if you configure one. Expect generated HTML under outputs, a localhost preview server/browser tab, and a small PID file in your home directory. Only use the optional deployment step after reviewing the generated itinerary and confirming you want it publicly accessible.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (4)

Context-Inappropriate Capability

Medium
Confidence
90% confidence
Finding
The skill includes automatic deployment instructions to surge.sh, which changes a local artifact into a publicly accessible webpage. This exceeds the core local-generation purpose and can unintentionally publish user-generated content or travel plans to the internet if invoked without strong consent and clear visibility warnings.

Context-Inappropriate Capability

Low
Confidence
82% confidence
Finding
Automatically starting a background HTTP server and opening a browser introduces additional system and network side effects that are not disclosed in the manifest. While useful for preview, this can surprise users, create lingering processes, and increase local attack surface beyond simple file generation.

Context-Inappropriate Capability

Medium
Confidence
87% confidence
Finding
The script reads a PID from a file in the user's home directory and can terminate that process if its command line contains `serve.py`. Although it tries to validate identity, the check is weak and broad, so a stale or attacker-influenced PID file could cause termination of an unrelated local process whose command line matches that substring, creating a local denial-of-service risk. In the context of a travel-itinerary skill, killing host processes is not necessary and increases the danger of the helper beyond its stated purpose.

Missing User Warnings

Medium
Confidence
87% confidence
Finding
The deployment section encourages publishing to a public URL without a sufficiently prominent warning that the generated page becomes accessible to anyone on the internet. Users may unknowingly expose itinerary content, links, or embedded data, especially if the skill is auto-triggered or run with minimal review.

VirusTotal

66/66 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.