Austria

• Outcome: Pass
• Latest audit: May 29, 2026 at 8:17 PM UTC
• Version:
  1.0.0

Overview

This is a coherent Austria travel-planning skill that keeps optional trip notes locally and shows no evidence of hidden execution, credential use, network access, or destructive behavior.

Install only if you are comfortable with Austria trip details being saved locally in ~/austria/memory.md for future planning. Review or delete that file if you do not want dates, budget, mobility, family, or route constraints retained.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

Missing User Warnings

Medium

• Confidence: 95% confidence
• Finding: The skill explicitly instructs the agent to create and maintain a persistent local memory file containing user trip preferences and constraints, but it does not direct the agent to disclose that storage to the user or obtain consent. This creates a privacy and transparency risk because users may reveal sensitive travel details, budgets, mobility needs, or family-related constraints without realizing that the information will be retained across sessions.

VirusTotal

65/65 vendors flagged this skill as clean.