ClawHub
Back to skill

Security audit

Sweden

Security checks for vulnerabilities and agentic risk

Overview

This is a Sweden travel-planning skill with narrow local trip memory and no evidence of hidden code execution, exfiltration, or destructive behavior.

Install only if you want Sweden-specific travel planning and are comfortable with the agent keeping local trip context in ~/sweden/memory.md. Review or delete that file if you do not want prior travel preferences reused.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (7)

Autonomous Decision Making

Medium
Category
Excessive Agency
Confidence
75% confidence
Finding

Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.

Content

Scanner excerpt · SKILL.md (reported line 105)May include surrounding context.

md
- Planning Lapland around aurora certainty instead of darkness, forecast, and backup activities.
- Ignoring ferry or island timetables in the archipelago and on Gotland.
- Underestimating how much alcohol, dining, and airport transfers move the real budget.
- Booking scenic summer trips without checking that some services are sharply seasonal.

## Security & Privacy

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
92% confidence
Finding

The skill instructs the agent to create and later update files under ~/sweden, including persistent memory, without any explicit user notice or consent flow. Silent filesystem writes can surprise users, persist potentially sensitive travel preferences, and create a precedent for unauthorized local state changes by agent skills.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
77% confidence
Finding

The title explicitly fixes the skill content to a specific country/locale ('Sweden'). Under the policy rule, locale constraints should either offer user choice or be clearly documented and justified as region-specific; this file does not explain that constraint beyond the title.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
83% confidence
Finding

The file is entirely scoped to Sweden travel plans, with headings and guidance that assume a fixed country context. Under the stated policy, forcing a specific locale without user opt-in can be a natural-language policy violation unless the regional constraint is clearly documented and justified; this file does not explain that limitation.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
88% confidence
Finding

The heading explicitly scopes the skill to Sweden, and the file provides Sweden-specific emergency numbers and guidance without offering any language/locale choice or explaining that the skill is intended only for Sweden-specific use. Under the policy rule, locale constraints should be opt-in or clearly documented as region-specific.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
90% confidence
Finding

This markdown file repeatedly labels and selects only "English" portals and English-language guidance throughout the skill sources. That creates a natural-language locale policy concern because it constrains output/reference language without any user opt-in or explicit justification for limiting sources to English.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
86% confidence
Finding

The entire playbook is written as prescriptive guidance in English and does not offer any language or locale choice for the user. Under the stated policy, forcing a specific language without user opt-in can be a natural-language policy violation unless the locale constraint is documented and justified.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.