ClawHub
Back to skill

Security audit

Europe

Security checks for vulnerabilities and agentic risk

Overview

This is a Europe travel and relocation guidance skill with optional local notes and disclosed official-site lookups; I found no hidden execution or data theft behavior.

Install this if you want Europe-focused planning help. Only allow persistent memory if you are comfortable saving coarse nationality, route, family, tax, healthcare, and planning context locally under ~/europe/, and verify country-specific legal, visa, tax, and healthcare steps with official sources before acting.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (10)

Autonomous Decision Making

Medium
Category
Excessive Agency
Confidence
75% confidence
Finding

Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.

Content

Scanner excerpt · SKILL.md (reported line 103)May include surrounding context.

md
## Common Traps

- Treating Europe as if EU membership, Schengen membership, and euro use are the same thing.
- Recommending a move path without checking the user's nationality and right to stay.
- Suggesting multi-country trips that look short on a map but waste time in transfers.
- Mixing tourist affordability with long-term housing and tax reality.
- Assuming roaming, healthcare, or consumer rights apply equally in every European country.

Autonomous Decision Making

Medium
Category
Excessive Agency
Confidence
75% confidence
Finding

Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.

Content

Scanner excerpt · SKILL.md (reported line 107)May include surrounding context.

md
- Suggesting multi-country trips that look short on a map but waste time in transfers.
- Mixing tourist affordability with long-term housing and tax reality.
- Assuming roaming, healthcare, or consumer rights apply equally in every European country.
- Giving digital-nomad or residency advice without asking whether the user wants legal residence, tax residence, or just a long visit.
- Ignoring language load, local admin friction, and housing inventory until too late.

## External Endpoints

Vague Triggers

Medium
Category
Not specified by scanner
Confidence
93% confidence
Finding

The phrase "Use this when the user is deciding with children, studying, or evaluating Europe beyond solo travel" describes very broad situations rather than specific trigger phrases or constraints. It does not clearly distinguish when this skill should activate versus related travel or relocation skills, and provides no negative examples to limit overlap with ordinary conversations about children or studying.

Content

No source excerpt is available for this finding.

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
94% confidence
Finding

The skill explicitly instructs creation of a persistent file in the user's home directory to retain cross-session context, and the template encourages storing travel status, nationality/passport context, family needs, and tax/healthcare sensitivities. Even though it says to keep memory coarse and avoid full identifiers by default, it lacks an explicit consent/privacy warning, retention guidance, or protection requirements for potentially sensitive personal data.

Content

No source excerpt is available for this finding.

Vague Triggers

Medium
Category
Not specified by scanner
Confidence
89% confidence
Finding

The instruction to use this file whenever the user needs a 'realistic Europe map' is broad and can activate on many general Europe-related queries, causing the skill to steer conversations even when the user did not ask for corridor-based guidance. This is not an exploit in itself, but it can create inappropriate skill invocation and lower response relevance across a wide range of requests.

Content

No source excerpt is available for this finding.

Vague Triggers

Medium
Category
Not specified by scanner
Confidence
90% confidence
Finding

The phrase "Use this when the user spends only part of the year in Europe, owns or wants a second place, or is testing a Europe base before committing" describes a wide set of situations but does not define clear trigger phrases, exclusions, or when another skill should be used instead. This ambiguity could cause the skill to be invoked for general travel, relocation, or property discussions that are only loosely related.

Content

No source excerpt is available for this finding.

Vague Triggers

Medium
Category
Not specified by scanner
Confidence
96% confidence
Finding

The instruction to activate 'whenever the user mentions Europe at all' is overly broad and can cause the skill to engage outside the user's intended scope. That increases the chance of unnecessary profiling or retention of location, nationality, residency, and other sensitive contextual data in conversations where Europe is only incidental.

Content

No source excerpt is available for this finding.

Vague Triggers

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

The trigger phrase "any question that smells like 'where do I really belong on paper?'" is intentionally broad and informal, which can cause the skill to activate for loosely related legal, tax, immigration, or residency topics outside its precise scope. In a domain involving regulated guidance, unintended invocation increases the chance of users receiving high-level framework advice when they actually need narrowly tailored country-specific or professional tax/legal direction.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
63% confidence
Finding

The title and instructions limit the memory artifact to "Europe" context, which can be read as a locale-specific constraint. Because the file does not explicitly state that this is an optional, region-specific skill selected for Europe-related use, the natural-language framing may be interpreted as imposing a locale scope without opt-in.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
82% confidence
Finding

The file title and instructions constrain the skill to a Europe-specific context, which can amount to a locale restriction. The document does not explicitly present this as a user choice or justify the locale limitation as a documented regional tool.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.