ClawHub

Lisbon

Security checks across malware telemetry and agentic risk

Overview

This appears to be an informational Lisbon travel skill with no executable behavior, though users should treat its restaurant and healthcare guidance as general advice.

Before installing, understand that this is an informational travel guide rather than a verified medical or safety authority. Use official emergency and healthcare channels for urgent situations, and treat restaurant heuristics as subjective suggestions rather than reliable safety or quality rules.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (2)

Natural-Language Policy Violations

Medium
Confidence
91% confidence
Finding
The guidance uses language as a proxy quality/safety signal by listing 'Portuguese spoken primarily' as a green flag. That can encode exclusionary bias and steer users away from immigrant- or tourist-friendly businesses without a clear user preference or necessity, which is inappropriate in a general travel skill.

Missing User Warnings

Medium
Confidence
94% confidence
Finding
The file gives concrete emergency and non-emergency healthcare instructions, including when to call 112, when to go to hospital, and how to seek care, without an explicit disclaimer that this is general informational content and not medical advice or emergency triage. In a healthcare-oriented skill for visitors and residents, users may rely on this guidance during urgent situations, so omissions or overgeneralized advice could delay appropriate care or create unsafe self-triage decisions.

VirusTotal

66/66 vendors flagged this skill as clean.

View on VirusTotal