ClawHub
Back to skill

Security audit

Switzerland

Security checks for vulnerabilities and agentic risk

Overview

This is a locally scoped Switzerland travel-planning skill; it stores optional trip notes locally and shows no evidence of hidden execution, network use, credential access, or destructive behavior.

Install this if you want Switzerland trip-planning help with local continuity. Before using it for an ongoing trip, be aware that it may keep a local ~/switzerland/memory.md record with travel dates, budget style, route preferences, constraints, and deadlines; ask the agent to show, edit, pause, or delete those notes if you do not want them retained.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (6)

Autonomous Decision Making

Medium
Category
Excessive Agency
Confidence
75% confidence
Finding

Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.

Content

Scanner excerpt · customs-and-border.md (reported line 19)May include surrounding context.

md
- Assuming Schengen means customs no longer exists
- Treating euro purchases and Swiss purchases as one tax environment
- Buying large amounts of food, alcohol, or luxury goods without checking declaration steps
- Forgetting that rural or train-based border moves can still face enforcement

## When To Slow Down the Plan

Vague Triggers

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

The integration field allows activation on broad topical mentions like 'Switzerland' or 'Swiss Alps topics,' which can cause the skill to engage outside clear user intent. This increases the chance of contextually inappropriate memory use or unsolicited behavior, especially in general travel conversations where Switzerland is only mentioned incidentally.

Content

No source excerpt is available for this finding.

Vague Triggers

Medium
Category
Not specified by scanner
Confidence
94% confidence
Finding

The skill defines activation triggers that include broad concepts like mountain travel, border hops, and expensive alpine bookings, which can cause the skill to activate outside clearly intended Switzerland-specific contexts. Overbroad activation can lead to unsolicited intervention and collection of travel-planning context in conversations where the user did not intend to invoke this skill.

Content

No source excerpt is available for this finding.

Ssd 3

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

The skill directs persistent storage of user travel details, preferences, border assumptions, budget reality, and constraints without explicit per-save or per-item consent. Even though the data is framed as lightweight trip notes, it can still reveal sensitive behavioral and financial information, and persistence increases the risk of misuse, over-retention, or unintended exposure.

Content

No source excerpt is available for this finding.

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
94% confidence
Finding

The skill instructs the assistant to create ~/switzerland/ and keep a planning record, but it does not require a clear user-facing notice at the time data is written to disk. This creates a transparency and consent problem because users may not realize that their travel details and preferences are being stored persistently on the local system.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
90% confidence
Finding

The source list consistently points to English-language pages, typically indicated by /en URL paths or English-only labels, across official and tourism resources. Because this is a Switzerland skill serving a multilingual country, the file implicitly fixes a single language without any stated user opt-in or justification, which matches the language/locale policy concern.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.