Security audit

United Kingdom

Security checks for vulnerabilities and agentic risk

Overview

This is a UK travel-planning skill that stores trip notes locally and does not show hidden, destructive, or deceptive behavior.

Before installing, understand that the skill keeps a local ~/uk/memory.md file with your UK travel preferences and constraints. Review or delete that file if you do not want durable trip memory. No evidence showed network calls, executable payloads, credential use, or access outside the declared local directory.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access

Findings (10)

Autonomous Decision Making

Medium

Category: Excessive Agency
Confidence: 75% confidence
Finding: Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.
Content: Scanner excerpt · customs-and-border.md (reported line 38)May include surrounding context.
md
## Common Border Mistakes - Treating gifts or snacks as automatically exempt - Carrying large cash without checking declaration rules - Assuming Ireland and UK customs logic are identical in every routing scenario - Packing restricted food or plant items in checked baggage without checking first

Autonomous Decision Making

Medium

Category: Excessive Agency
Confidence: 75% confidence
Finding: Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.
Content: Scanner excerpt · customs-and-border.md (reported line 40)May include surrounding context.
md
## Common Border Mistakes - Treating gifts or snacks as automatically exempt - Carrying large cash without checking declaration rules - Assuming Ireland and UK customs logic are identical in every routing scenario - Packing restricted food or plant items in checked baggage without checking first

Vague Triggers

Medium

Category: Not specified by scanner
Confidence: 95% confidence
Finding: The activation guidance is overly broad because it allows the skill to trigger on general mentions of the UK, constituent nations, or rail-road planning rather than requiring clear user intent for UK trip planning. This can cause unnecessary invocation, collection of travel-related preferences, and persistence of user data in conversations where the user did not explicitly ask for this skill.
Content: No source excerpt is available for this finding.

Missing User Warnings

Medium

Category: Not specified by scanner
Confidence: 95% confidence
Finding: The skill directs the agent to save user preferences in ~/uk/memory.md without any explicit notice or consent flow. Persistently storing travel preferences can expose sensitive personal information such as travel dates, destinations, constraints, and potentially immigration-related details beyond the user's expectations.
Content: No source excerpt is available for this finding.

Missing User Warnings

Medium

Category: Not specified by scanner
Confidence: 97% confidence
Finding: The skill specifies internal storage of detailed trip data including timing, region focus, transport preference, hard constraints, priorities, and reservation deadlines, but gives no warning that this personal planning information will be retained. In context, travel plans can reveal sensitive behavioral and location information, making silent persistence a privacy risk.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 80% confidence
Finding: The heading explicitly fixes the skill content to the United Kingdom, which can be a locale constraint. Because the file does not indicate that this is optional, user-selected, or part of a clearly documented region-specific tool, it may conflict with the policy against forcing a locale without opt-in.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 77% confidence
Finding: The title explicitly scopes the content to 'United Kingdom,' which is a locale-specific constraint presented without any indication of user choice or opt-in. Under the policy criteria, forcing a specific locale can be a natural-language policy violation unless the locale restriction is clearly documented and justified.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 87% confidence
Finding: The title explicitly scopes the skill to the United Kingdom, which is a locale-specific constraint presented as a fixed mode rather than a user choice. The file does not indicate that the locale is optional or selected by the user, so it can be read as forcing a specific regional framing.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 88% confidence
Finding: The title explicitly scopes the guidance to the United Kingdom, but the document does not state that this skill should only be used when the user is traveling in or asking about the UK. Under the policy, locale-specific guidance should either offer user choice or clearly document the regional constraint and justification.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 89% confidence
Finding: The heading explicitly scopes the skill to the United Kingdom, which is a locale-specific constraint expressed in natural language. The file does not offer an alternative locale choice or explain that this skill is intentionally region-specific for compliance or similar reasons.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.