Security audit
Airbnb Gateway
Security checks across malware telemetry and agentic risk
Overview
This documentation-only Airbnb operations skill is high-impact but clearly scoped, approval-gated, and scanner-clean, with no evidence of hidden data theft or destructive behavior.
Install only in an environment where you control the Airbnb account and can enforce the approval policy. Keep calendar mutations human-in-the-loop, verify the role-to-tool mapping before use, and treat the ClawBridge token/logged-in browser as sensitive account access.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
64/64 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.