ClawHub
Back to skill

Security audit

Argentina

Security checks for vulnerabilities and agentic risk

Overview

This is a coherent Argentina travel-planning skill that stores trip notes locally, with a privacy note about its persistent memory behavior.

Install only if you are comfortable with the skill keeping Argentina trip notes in ~/argentina/memory.md. Review that file if plans include sensitive details, and delete it when you no longer want the agent to reuse prior trip context.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (4)

Natural-Language Policy Violations

Medium
Confidence
84% confidence
Finding
The title explicitly scopes the skill to Argentina, which is a locale-specific constraint. The file does not state that this regional focus is optional, user-selected, or justified as a dedicated region-specific skill, so it may violate language/locale policy requirements.

Missing User Warnings

Medium
Confidence
95% confidence
Finding
The skill instructs the agent to create and update a persistent file in the user's home directory containing travel intent, constraints, and decision status, but it provides no user-facing notice or consent step. This creates a privacy and transparency issue because personal travel details may be stored without the user understanding that retention is happening or where the data is kept.

Missing User Warnings

Medium
Confidence
97% confidence
Finding
The instruction to read stored memory 'silently' means the agent may access previously saved personal travel constraints and plans without notifying the user. Even if the content is only travel-related, undisclosed retrieval of persisted user data undermines privacy expectations and can expose sensitive preferences or logistics information in ways the user did not anticipate.

Natural-Language Policy Violations

Low
Confidence
77% confidence
Finding
The instruction says Argentina planning should use southern seasons first, which imposes a specific regional framing as a default. While contextually sensible for Argentina, the file does not explicitly present this as a user choice or opt-in preference.

Static analysis

No suspicious patterns detected.