Bangkok

• Outcome: Pass
• Latest audit: Sep 10, 2026 · 11:48 PM UTC
• Version: 1.0.4

Overview

This is a static Bangkok travel and relocation guide with some content-quality caveats, but no hidden execution, credential access, or disproportionate authority.

Before installing, understand that the skill may keep Bangkok-specific preferences and observations in a local Clawic data directory. Use its visa, tax, work, alcohol, and cannabis guidance as a planning aid only, and verify current rules with official sources or qualified professionals before spending money, working, filing taxes, or making immigration decisions. For beaches, islands, or other Thai bases, prefer a dedicated Thailand skill because this package includes some out-of-scope side guidance.

A.I.G

Vulnerability Patterns

• Skill Instruction Hijacking: Alters the agent's session goals or safety constraints when the skill loads
• Agent Memory Poisoning: Writes attacker-controlled rules into memory that affect later sessions
• Remote Payload Retrieval and Execution: Fetches external code whose behavior can change after review
• Embedded Malicious Code: Ships malicious scripts inside the skill and executes them locally
• Unauthorized Access and Privilege Escalation: Obtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep
• MCP Tool Poisoning: Hidden Instructions, Unicode Deception, Parameter Description Injection
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access

Findings (18)

Missing User Warnings

Medium

• Category: Not specified by scanner
• Confidence: 96% confidence

Finding

The skill explicitly lists 'Work illegally' as an option for foreigners without an immediate, explicit warning that this is unlawful and can lead to arrest, fines, deportation, blacklisting, or visa/work-permit consequences. In a travel/relocation/business guidance skill, presenting illegal employment as a normalized option can steer users toward unlawful conduct, especially because the surrounding content is practical and advisory in tone.

Content

No source excerpt is available for this finding.

Description-Behavior Mismatch

Medium

• Category: Not specified by scanner
• Confidence: 97% confidence

Finding

The manifest explicitly limits this skill to Bangkok and says beaches, islands, or other Thai bases should use the thailand skill instead. This section gives seasonal guidance for Gulf and Andaman coastal destinations such as Koh Samui, Phuket, and Krabi, which extends beyond Bangkok trip planning.

Content

No source excerpt is available for this finding.

Missing User Warnings

Medium

• Category: Not specified by scanner
• Confidence: 92% confidence

Finding

The guide normalizes and repeats noncompliant alcohol sales practices by stating that many places serve outside legal hours and that store rules are often ignored, without warning users to comply with Thai law. In a travel skill, this can encourage unlawful behavior, expose users to fines or disputes, and reduce trust in the safety of the guidance.

Content

No source excerpt is available for this finding.

Description-Behavior Mismatch

Medium

• Category: Not specified by scanner
• Confidence: 97% confidence

Finding

The file provides substantial guidance on beaches, islands, and non-Bangkok destinations even though the skill manifest explicitly says those topics are out of scope and should be handled by a different skill. This is dangerous primarily as a scope-integrity issue: it can cause the agent to answer with the wrong skill, bypass routing boundaries, and deliver lower-quality or conflicting guidance than intended.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

• Category: Not specified by scanner
• Confidence: 94% confidence

Finding

The line 'Anyone over 30' categorically excludes people by age and presents a stereotype as travel advice without qualification. In a consumer-facing travel/relocation skill, this can produce discriminatory guidance, alienate users, and encourage unfair treatment based on a protected characteristic rather than actual preferences like noise tolerance or nightlife interest.

Content

No source excerpt is available for this finding.

Description-Behavior Mismatch

Medium

• Category: Not specified by scanner
• Confidence: 95% confidence

Finding

The content recommends non-Bangkok destinations such as Bali, Da Nang/Hoi An, Kuala Lumpur, and Thai islands, which conflicts with the skill's declared scope limiting coverage to Bangkok and day trips from Bangkok. This can cause the agent to provide out-of-scope guidance, weakening routing boundaries and potentially bypassing intended specialization or policy constraints tied to other destination skills.

Content

No source excerpt is available for this finding.

Autonomous Decision Making

Medium

• Category: Excessive Agency
• Confidence: 75% confidence

Finding

Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.

Content

Scanner excerpt · SKILL.md (reported line 240)May include surrounding context.

md

|------|--------------|------------|
| "Gem sale, government promotion, today only" | The most documented scam in Thailand — resale value near zero | Never buy gems to resell; `safety.md` |
| 24-hour suit deals | Fused construction, poly-blend "wool" | Time + fittings + fabric books, ฿15k floor |
| Buying electronics without checking Thai warranty | Grey imports void local service | Ask "Thai warranty?" — price difference is the answer |
| Haggling in fixed-price shops | Marks you as fresh; wastes goodwill | Markets only |
| Checking in VAT-refund luxury goods | Airside re-inspection required ≥฿10,000/item | Carry them through security |

Autonomous Decision Making

Medium

• Category: Excessive Agency
• Confidence: 75% confidence

Finding

Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.

Content

Scanner excerpt · shopping.md (reported line 55)May include surrounding context.

md

|------|--------------|------------|
| "Gem sale, government promotion, today only" | The most documented scam in Thailand — resale value near zero | Never buy gems to resell; `safety.md` |
| 24-hour suit deals | Fused construction, poly-blend "wool" | Time + fittings + fabric books, ฿15k floor |
| Buying electronics without checking Thai warranty | Grey imports void local service | Ask "Thai warranty?" — price difference is the answer |
| Haggling in fixed-price shops | Marks you as fresh; wastes goodwill | Markets only |
| Checking in VAT-refund luxury goods | Airside re-inspection required ≥฿10,000/item | Carry them through security |

Autonomous Decision Making

Medium

• Category: Excessive Agency
• Confidence: 75% confidence

Finding

Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.

Content

Scanner excerpt · taxes.md (reported line 68)May include surrounding context.

md

|------|--------------|------------|
| "Gem sale, government promotion, today only" | The most documented scam in Thailand — resale value near zero | Never buy gems to resell; `safety.md` |
| 24-hour suit deals | Fused construction, poly-blend "wool" | Time + fittings + fabric books, ฿15k floor |
| Buying electronics without checking Thai warranty | Grey imports void local service | Ask "Thai warranty?" — price difference is the answer |
| Haggling in fixed-price shops | Marks you as fresh; wastes goodwill | Markets only |
| Checking in VAT-refund luxury goods | Airside re-inspection required ≥฿10,000/item | Carry them through security |

Natural-Language Policy Violations

Medium

• Category: Not specified by scanner
• Confidence: 94% confidence

Finding

The content states a preference for 'Native English speaker (or near-native)' and a passport from an English-speaking country as preferred, which can reinforce discriminatory hiring guidance based on nationality or language background rather than lawful, job-relevant qualifications. In a job guidance skill, this is risky because users may treat it as normative advice and replicate exclusionary screening practices that may violate platform policy or local anti-discrimination expectations.

Content

No source excerpt is available for this finding.

Missing User Warnings

Medium

• Category: Not specified by scanner
• Confidence: 93% confidence

Finding

The skill states that remote work on tourist or ED visas is technically illegal but downplays the risk by adding that enforcement is minimal. In a travel/relocation guidance skill, that framing can encourage users to violate local immigration and labor law, exposing them to fines, deportation, visa denial, or other compliance consequences.

Content

No source excerpt is available for this finding.

Missing User Warnings

Medium

• Category: Not specified by scanner
• Confidence: 96% confidence

Finding

The freelancing section describes working on a tourist visa as a 'gray area' even though it also acknowledges a work permit is technically required. This presents unlawful work as common or quasi-acceptable, which is risky in a visa and relocation skill because users may rely on it to make real-world compliance decisions.

Content

No source excerpt is available for this finding.

Description-Behavior Mismatch

Medium

• Category: Not specified by scanner
• Confidence: 96% confidence

Finding

The skill manifest explicitly says Bangkok-only and says beaches/islands or other Thai bases should use the thailand skill, but the itinerary includes Koh Samet and Koh Sichang as day-trip options. This creates scope confusion and can route users to incomplete or less accurate guidance outside the skill's declared domain, increasing the chance of bad travel planning or omitted safety/logistics details.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

• Category: Not specified by scanner
• Confidence: 79% confidence

Finding

Line L088 states 'No English, point and nod,' which is natural-language guidance that assumes a specific language limitation and gives no opt-in, alternative language support, or contextual justification. This can be read as a locale/language policy issue because it normalizes exclusionary communication constraints rather than presenting them as optional or contextual travel advice.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

• Category: Not specified by scanner
• Confidence: 88% confidence

Finding

This markdown file is entirely framed as guidance for learning and using Thai, including prescriptive statements such as 'Use these constantly' and extensive Thai-only phrase recommendations. Under the stated policy, forcing a specific language without user opt-in can be a natural-language policy violation, and the document does not present a language choice or explicitly justify a locale-specific constraint.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

• Category: Not specified by scanner
• Confidence: 78% confidence

Finding

Line L49 states "LINE (the default messenger — Thais expect it, not WhatsApp)," which is a natural-language instruction steering users toward a specific communication platform based on local expectation. Under the policy, language/locale-style constraints should not be forced without opt-in unless clearly justified as a region-specific requirement.

Content

No source excerpt is available for this finding.

Missing User Warnings

Low

• Category: Not specified by scanner
• Confidence: 80% confidence

Finding

The itinerary suggests renting a bicycle for Ayutthaya without any caution about heat, traffic, road conditions, hydration, or helmet availability. In a travel-planning skill, this omission can lead users to underestimate basic safety risks and make less informed transport decisions.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

• Category: Not specified by scanner
• Confidence: 78% confidence

Finding

The text states that 'drivers often don't speak English' and that 'English works' in certain areas, then centers English-based coping strategies and English-speaking services. Because this is natural-language guidance in a general visitor file, it effectively sets English as the expected interaction language without an explicit opt-in or a clearly documented language-scope rationale.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.