ClawHub
Back to skill

Security audit

Dominican Republic

Security checks for vulnerabilities and agentic risk

Overview

This is a travel-planning skill that stores limited trip preferences locally and does not show hidden, destructive, or exfiltrating behavior.

Before installing, be aware that the skill keeps a local trip memory file under ~/dominican-republic/. Use it only if you are comfortable storing travel dates, airports, preferences, family or mobility notes, and planning decisions on this machine; review or delete that folder if the device is shared or the trip details are sensitive.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (5)

Autonomous Decision Making

Medium
Category
Excessive Agency
Confidence
75% confidence
Finding

Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.

Content

Scanner excerpt · SKILL.md (reported line 120)May include surrounding context.

md
## Common Traps

- Treating Punta Cana as representative of the whole country.
- Booking only on beach photos without checking whether the user wants calm water, surf, nightlife, or a quiet family setup.
- Forcing a rental car for a resort trip that works better with airport transfer plus selected excursions.
- Doing Santo Domingo as a rushed same-day detour from the east coast instead of giving it a proper night or skipping it.
- Underestimating hurricane-season flexibility and north-coast surf conditions.

Autonomous Decision Making

Medium
Category
Excessive Agency
Confidence
75% confidence
Finding

Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.

Content

Scanner excerpt · SKILL.md (reported line 125)May include surrounding context.

md
## Common Traps

- Treating Punta Cana as representative of the whole country.
- Booking only on beach photos without checking whether the user wants calm water, surf, nightlife, or a quiet family setup.
- Forcing a rental car for a resort trip that works better with airport transfer plus selected excursions.
- Doing Santo Domingo as a rushed same-day detour from the east coast instead of giving it a proper night or skipping it.
- Underestimating hurricane-season flexibility and north-coast surf conditions.

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

The skill explicitly creates and uses a persistent local memory file to store user travel preferences, but it does not tell the user that their data will be written to disk and later reused. This creates a privacy and consent issue: travel dates, family setup, mobility needs, airports, and movement patterns can be sensitive, and silent persistence increases the risk of unintended disclosure on a shared machine or through later access by other tools.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
82% confidence
Finding

The text states that 'Spanish dominates daily life' and later says 'Basic Spanish helps,' which can function as a locale expectation in the guidance. Because the content does not explicitly offer alternatives or frame this as optional context for the user, it risks a mild language/locale policy issue.

Content

No source excerpt is available for this finding.

Missing User Warnings

Low
Category
Not specified by scanner
Confidence
88% confidence
Finding

The returning-user flow instructs the skill to automatically read previously saved trip details and reuse them without an explicit warning to the user. While this is likely intended as convenience rather than abuse, undisclosed automatic reuse can surprise users and expose stale or sensitive travel information in contexts where they did not expect persistence.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.