Bangkok

• Outcome: Review
• Latest audit: May 28, 2026, 7:30 AM
• Version:
  1.0.0

Overview

This is a text-only Bangkok guide with no device or data access, but parts of it give practical advice that can normalize or help conceal unlawful work and other local-law violations.

Review carefully before installing. It does not appear to threaten your device, accounts, or files, but do not rely on it as legal, immigration, employment, nightlife, or alcohol-law advice. Verify Thai visa and work-authorization rules with official sources or qualified counsel, and avoid using the skill for advice on hiding work activity or bypassing local requirements.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (8)

Missing User Warnings

Medium

• Confidence: 96% confidence
• Finding: The section presents 'Work illegally' and 'Work remotely for foreign clients (gray area)' as options without a strong, explicit warning that these may violate Thai immigration, labor, or tax law and can lead to fines, deportation, visa cancellation, or business penalties. In a practical relocation/business guide, users may reasonably interpret listed options as viable pathways, which makes the omission materially risky.

Natural-Language Policy Violations

Medium

• Confidence: 93% confidence
• Finding: The content normalizes and recommends illegal alcohol service by stating that many venues serve outside official hours and that rules are often ignored. In a travel guidance skill, this can encourage users to break local law or seek non-compliant venues, increasing legal, safety, and trust risks.

Natural-Language Policy Violations

Medium

• Confidence: 94% confidence
• Finding: The phrase 'Anyone over 30' is unqualified age-based exclusion language and can be read as stereotyping or discouraging access based solely on age. In a travel guidance skill, this creates unnecessary discriminatory framing and may alienate users even if the author likely meant to describe the area's typical social scene.

Missing User Warnings

Medium

• Confidence: 88% confidence
• Finding: The guide gives detailed nightlife, alcohol, red-light-area, and 'bar fine' information in a matter-of-fact travel-advice style without an upfront safety and legality warning. While some risks are mentioned later, the content can normalize or facilitate risky or exploitative behavior and may underemphasize legal, consent, trafficking, intoxication, and personal-safety concerns for users seeking nightlife guidance.

Missing User Warnings

Medium

• Confidence: 92% confidence
• Finding: The guide explicitly discusses remote-work-oriented stay strategies in Thailand while only briefly noting a 'legal gray area' and that one 'technically can't work on tourist visa,' without a prominent, unambiguous warning that tourist-status options do not authorize work. In a digital-nomad guide, readers may reasonably treat the listed tourist and ED visa pathways as workable remote-work options, which can encourage unlawful employment activity and expose users to fines, denial of entry, visa cancellation, or immigration scrutiny.

Natural-Language Policy Violations

Medium

• Confidence: 94% confidence
• Finding: The content states that remote work on tourist or ED visas is technically illegal but minimizes the risk by adding that enforcement is minimal. In a travel/living guidance skill for Bangkok, this can encourage users to engage in unlawful work arrangements by framing noncompliance as routine and low-risk rather than emphasizing lawful options.

Natural-Language Policy Violations

Medium

• Confidence: 95% confidence
• Finding: The freelancing section acknowledges that a work permit is technically required but then normalizes noncompliance by saying many people do it on a tourist visa and calling it a gray area. Because this skill is intended to guide visitors, nomads, and entrepreneurs, that framing can be interpreted as practical advice to violate local law.

Natural-Language Policy Violations

High

• Confidence: 98% confidence
• Finding: The text explicitly advises users engaged in unauthorized remote work to avoid detection by authorities ('Don't advertise you're working'). That is actionable guidance for concealing unlawful activity, which can facilitate immigration and labor law violations and expose users to deportation, fines, detention, or entry bans.

VirusTotal

65/65 vendors flagged this skill as clean.