Bangkok

• Outcome: Pass
• Latest audit: Sep 10, 2026 · 11:48 PM UTC
• Version: 1.0.4

Overview

This is a static Bangkok travel and relocation guide with some content-quality caveats, but no hidden execution, credential access, or disproportionate authority.

Before installing, understand that the skill may keep Bangkok-specific preferences and observations in a local Clawic data directory. Use its visa, tax, work, alcohol, and cannabis guidance as a planning aid only, and verify current rules with official sources or qualified professionals before spending money, working, filing taxes, or making immigration decisions. For beaches, islands, or other Thai bases, prefer a dedicated Thailand skill because this package includes some out-of-scope side guidance.

A.I.G

Vulnerability Patterns

• Skill Instruction Hijacking: Alters the agent's session goals or safety constraints when the skill loads
• Agent Memory Poisoning: Writes attacker-controlled rules into memory that affect later sessions
• Remote Payload Retrieval and Execution: Fetches external code whose behavior can change after review
• Embedded Malicious Code: Ships malicious scripts inside the skill and executes them locally
• Unauthorized Access and Privilege Escalation: Obtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep
• MCP Tool Poisoning: Hidden Instructions, Unicode Deception, Parameter Description Injection
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access

Findings (18)

Missing User Warnings

Medium

• Confidence: 96% confidence
• Finding: The skill explicitly lists 'Work illegally' as an option for foreigners without an immediate, explicit warning that this is unlawful and can lead to arrest, fines, deportation, blacklisting, or visa/work-permit consequences. In a travel/relocation/business guidance skill, presenting illegal employment as a normalized option can steer users toward unlawful conduct, especially because the surrounding content is practical and advisory in tone.

Description-Behavior Mismatch

Medium

• Confidence: 97% confidence
• Finding: The manifest explicitly limits this skill to Bangkok and says beaches, islands, or other Thai bases should use the thailand skill instead. This section gives seasonal guidance for Gulf and Andaman coastal destinations such as Koh Samui, Phuket, and Krabi, which extends beyond Bangkok trip planning.

Missing User Warnings

Medium

• Confidence: 92% confidence
• Finding: The guide normalizes and repeats noncompliant alcohol sales practices by stating that many places serve outside legal hours and that store rules are often ignored, without warning users to comply with Thai law. In a travel skill, this can encourage unlawful behavior, expose users to fines or disputes, and reduce trust in the safety of the guidance.

Description-Behavior Mismatch

Medium

• Confidence: 97% confidence
• Finding: The file provides substantial guidance on beaches, islands, and non-Bangkok destinations even though the skill manifest explicitly says those topics are out of scope and should be handled by a different skill. This is dangerous primarily as a scope-integrity issue: it can cause the agent to answer with the wrong skill, bypass routing boundaries, and deliver lower-quality or conflicting guidance than intended.

Natural-Language Policy Violations

Medium

• Confidence: 94% confidence
• Finding: The line 'Anyone over 30' categorically excludes people by age and presents a stereotype as travel advice without qualification. In a consumer-facing travel/relocation skill, this can produce discriminatory guidance, alienate users, and encourage unfair treatment based on a protected characteristic rather than actual preferences like noise tolerance or nightlife interest.

Description-Behavior Mismatch

Medium

• Confidence: 95% confidence
• Finding: The content recommends non-Bangkok destinations such as Bali, Da Nang/Hoi An, Kuala Lumpur, and Thai islands, which conflicts with the skill's declared scope limiting coverage to Bangkok and day trips from Bangkok. This can cause the agent to provide out-of-scope guidance, weakening routing boundaries and potentially bypassing intended specialization or policy constraints tied to other destination skills.

Autonomous Decision Making

Medium

• Category: Excessive Agency

Content

|------|--------------|------------|
| "Gem sale, government promotion, today only" | The most documented scam in Thailand — resale value near zero | Never buy gems to resell; `safety.md` |
| 24-hour suit deals | Fused construction, poly-blend "wool" | Time + fittings + fabric books, ฿15k floor |
| Buying electronics without checking Thai warranty | Grey imports void local service | Ask "Thai warranty?" — price difference is the answer |
| Haggling in fixed-price shops | Marks you as fresh; wastes goodwill | Markets only |
| Checking in VAT-refund luxury goods | Airside re-inspection required ≥฿10,000/item | Carry them through security |

• Confidence: 75% confidence
• Finding: Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.

Autonomous Decision Making

Medium

• Category: Excessive Agency

Content

|------|--------------|------------|
| "Gem sale, government promotion, today only" | The most documented scam in Thailand — resale value near zero | Never buy gems to resell; `safety.md` |
| 24-hour suit deals | Fused construction, poly-blend "wool" | Time + fittings + fabric books, ฿15k floor |
| Buying electronics without checking Thai warranty | Grey imports void local service | Ask "Thai warranty?" — price difference is the answer |
| Haggling in fixed-price shops | Marks you as fresh; wastes goodwill | Markets only |
| Checking in VAT-refund luxury goods | Airside re-inspection required ≥฿10,000/item | Carry them through security |

• Confidence: 75% confidence
• Finding: Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.

Autonomous Decision Making

Medium

• Category: Excessive Agency

Content

|------|--------------|------------|
| "Gem sale, government promotion, today only" | The most documented scam in Thailand — resale value near zero | Never buy gems to resell; `safety.md` |
| 24-hour suit deals | Fused construction, poly-blend "wool" | Time + fittings + fabric books, ฿15k floor |
| Buying electronics without checking Thai warranty | Grey imports void local service | Ask "Thai warranty?" — price difference is the answer |
| Haggling in fixed-price shops | Marks you as fresh; wastes goodwill | Markets only |
| Checking in VAT-refund luxury goods | Airside re-inspection required ≥฿10,000/item | Carry them through security |

• Confidence: 75% confidence
• Finding: Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.

Natural-Language Policy Violations

Medium

• Confidence: 94% confidence
• Finding: The content states a preference for 'Native English speaker (or near-native)' and a passport from an English-speaking country as preferred, which can reinforce discriminatory hiring guidance based on nationality or language background rather than lawful, job-relevant qualifications. In a job guidance skill, this is risky because users may treat it as normative advice and replicate exclusionary screening practices that may violate platform policy or local anti-discrimination expectations.

Missing User Warnings

Medium

• Confidence: 93% confidence
• Finding: The skill states that remote work on tourist or ED visas is technically illegal but downplays the risk by adding that enforcement is minimal. In a travel/relocation guidance skill, that framing can encourage users to violate local immigration and labor law, exposing them to fines, deportation, visa denial, or other compliance consequences.

Missing User Warnings

Medium

• Confidence: 96% confidence
• Finding: The freelancing section describes working on a tourist visa as a 'gray area' even though it also acknowledges a work permit is technically required. This presents unlawful work as common or quasi-acceptable, which is risky in a visa and relocation skill because users may rely on it to make real-world compliance decisions.

Description-Behavior Mismatch

Medium

• Confidence: 96% confidence
• Finding: The skill manifest explicitly says Bangkok-only and says beaches/islands or other Thai bases should use the thailand skill, but the itinerary includes Koh Samet and Koh Sichang as day-trip options. This creates scope confusion and can route users to incomplete or less accurate guidance outside the skill's declared domain, increasing the chance of bad travel planning or omitted safety/logistics details.

Natural-Language Policy Violations

Low

• Confidence: 79% confidence
• Finding: Line L088 states 'No English, point and nod,' which is natural-language guidance that assumes a specific language limitation and gives no opt-in, alternative language support, or contextual justification. This can be read as a locale/language policy issue because it normalizes exclusionary communication constraints rather than presenting them as optional or contextual travel advice.

Natural-Language Policy Violations

Low

• Confidence: 88% confidence
• Finding: This markdown file is entirely framed as guidance for learning and using Thai, including prescriptive statements such as 'Use these constantly' and extensive Thai-only phrase recommendations. Under the stated policy, forcing a specific language without user opt-in can be a natural-language policy violation, and the document does not present a language choice or explicitly justify a locale-specific constraint.

Natural-Language Policy Violations

Low

• Confidence: 78% confidence
• Finding: Line L49 states "LINE (the default messenger — Thais expect it, not WhatsApp)," which is a natural-language instruction steering users toward a specific communication platform based on local expectation. Under the policy, language/locale-style constraints should not be forced without opt-in unless clearly justified as a region-specific requirement.

Missing User Warnings

Low

• Confidence: 80% confidence
• Finding: The itinerary suggests renting a bicycle for Ayutthaya without any caution about heat, traffic, road conditions, hydration, or helmet availability. In a travel-planning skill, this omission can lead users to underestimate basic safety risks and make less informed transport decisions.

Natural-Language Policy Violations

Low

• Confidence: 78% confidence
• Finding: The text states that 'drivers often don't speak English' and that 'English works' in certain areas, then centers English-based coping strategies and English-speaking services. Because this is natural-language guidance in a general visitor file, it effectively sets English as the expected interaction language without an explicit opt-in or a clearly documented language-scope rationale.

Static analysis

No suspicious patterns detected.