ClawHub
Back to skill

Security audit

hk-hiking

Security checks for vulnerabilities and agentic risk

Overview

This is a coherent Hong Kong hiking-planning skill that uses public reference data and official public APIs, with no evidence of hidden execution, persistence, credential access, or data theft.

Before installing, expect the skill to consult public Hong Kong government and transport data sources for weather, routes, facilities, and ferry or transit information. Treat route times, facility availability, and transport details as planning aids only, and verify current weather warnings, closures, and official notices before hiking.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (21)

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 140)May include surrounding context.

md
| 數據集 | 說明 | 官方頁面 |
|--------|------|----------|
| 露營地點 | 41個指定露營地詳情 | https://data.gov.hk/tc-data/dataset/hk-afcd-afcdlist-campsite |
| 加水站 | 郊野公園加水站位置 | https://data.gov.hk/tc-data/dataset/hk-afcd-afcdlist-water-dispenser |
| 洗手間 | 郊野公園洗手間位置 | https://data.gov.hk/tc-data/dataset/hk-afcd-afcdlist-toilet |
| 郊野公園統計 | 訪客人次等統計數字 | https://data.gov.hk/tc-data/dataset/hk-afcd-afcdlist-country-park-statistic |

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 141)May include surrounding context.

md
| 數據集 | 說明 | 官方頁面 |
|--------|------|----------|
| 露營地點 | 41個指定露營地詳情 | https://data.gov.hk/tc-data/dataset/hk-afcd-afcdlist-campsite |
| 加水站 | 郊野公園加水站位置 | https://data.gov.hk/tc-data/dataset/hk-afcd-afcdlist-water-dispenser |
| 洗手間 | 郊野公園洗手間位置 | https://data.gov.hk/tc-data/dataset/hk-afcd-afcdlist-toilet |
| 郊野公園統計 | 訪客人次等統計數字 | https://data.gov.hk/tc-data/dataset/hk-afcd-afcdlist-country-park-statistic |

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 156)May include surrounding context.

md
| 數據集 | 說明 | 官方頁面 |
|--------|------|----------|
| 露營地點 | 41個指定露營地詳情 | https://data.gov.hk/tc-data/dataset/hk-afcd-afcdlist-campsite |
| 加水站 | 郊野公園加水站位置 | https://data.gov.hk/tc-data/dataset/hk-afcd-afcdlist-water-dispenser |
| 洗手間 | 郊野公園洗手間位置 | https://data.gov.hk/tc-data/dataset/hk-afcd-afcdlist-toilet |
| 郊野公園統計 | 訪客人次等統計數字 | https://data.gov.hk/tc-data/dataset/hk-afcd-afcdlist-country-park-statistic |

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 157)May include surrounding context.

md
| 數據集 | 說明 | 官方頁面 |
|--------|------|----------|
| 露營地點 | 41個指定露營地詳情 | https://data.gov.hk/tc-data/dataset/hk-afcd-afcdlist-campsite |
| 加水站 | 郊野公園加水站位置 | https://data.gov.hk/tc-data/dataset/hk-afcd-afcdlist-water-dispenser |
| 洗手間 | 郊野公園洗手間位置 | https://data.gov.hk/tc-data/dataset/hk-afcd-afcdlist-toilet |
| 郊野公園統計 | 訪客人次等統計數字 | https://data.gov.hk/tc-data/dataset/hk-afcd-afcdlist-country-park-statistic |

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · references/country-park-facilities.md (reported line 20)May include surrounding context.

md
| 數據集 | 說明 | 官方頁面 |
|--------|------|----------|
| 露營地點 | 41個指定露營地詳情 | https://data.gov.hk/tc-data/dataset/hk-afcd-afcdlist-campsite |
| 加水站 | 郊野公園加水站位置 | https://data.gov.hk/tc-data/dataset/hk-afcd-afcdlist-water-dispenser |
| 洗手間 | 郊野公園洗手間位置 | https://data.gov.hk/tc-data/dataset/hk-afcd-afcdlist-toilet |
| 郊野公園統計 | 訪客人次等統計數字 | https://data.gov.hk/tc-data/dataset/hk-afcd-afcdlist-country-park-statistic |

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · references/country-park-facilities.md (reported line 21)May include surrounding context.

md
| 數據集 | 說明 | 官方頁面 |
|--------|------|----------|
| 露營地點 | 41個指定露營地詳情 | https://data.gov.hk/tc-data/dataset/hk-afcd-afcdlist-campsite |
| 加水站 | 郊野公園加水站位置 | https://data.gov.hk/tc-data/dataset/hk-afcd-afcdlist-water-dispenser |
| 洗手間 | 郊野公園洗手間位置 | https://data.gov.hk/tc-data/dataset/hk-afcd-afcdlist-toilet |
| 郊野公園統計 | 訪客人次等統計數字 | https://data.gov.hk/tc-data/dataset/hk-afcd-afcdlist-country-park-statistic |

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · references/country-park-facilities.md (reported line 22)May include surrounding context.

md
| 數據集 | 說明 | 官方頁面 |
|--------|------|----------|
| 露營地點 | 41個指定露營地詳情 | https://data.gov.hk/tc-data/dataset/hk-afcd-afcdlist-campsite |
| 加水站 | 郊野公園加水站位置 | https://data.gov.hk/tc-data/dataset/hk-afcd-afcdlist-water-dispenser |
| 洗手間 | 郊野公園洗手間位置 | https://data.gov.hk/tc-data/dataset/hk-afcd-afcdlist-toilet |
| 郊野公園統計 | 訪客人次等統計數字 | https://data.gov.hk/tc-data/dataset/hk-afcd-afcdlist-country-park-statistic |

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · references/country-park-facilities.md (reported line 23)May include surrounding context.

md
| 數據集 | 說明 | 官方頁面 |
|--------|------|----------|
| 露營地點 | 41個指定露營地詳情 | https://data.gov.hk/tc-data/dataset/hk-afcd-afcdlist-campsite |
| 加水站 | 郊野公園加水站位置 | https://data.gov.hk/tc-data/dataset/hk-afcd-afcdlist-water-dispenser |
| 洗手間 | 郊野公園洗手間位置 | https://data.gov.hk/tc-data/dataset/hk-afcd-afcdlist-toilet |
| 郊野公園統計 | 訪客人次等統計數字 | https://data.gov.hk/tc-data/dataset/hk-afcd-afcdlist-country-park-statistic |

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · references/transport.md (reported line 156)May include surrounding context.

md
| 數據集 | 說明 | 官方頁面 |
|--------|------|----------|
| 露營地點 | 41個指定露營地詳情 | https://data.gov.hk/tc-data/dataset/hk-afcd-afcdlist-campsite |
| 加水站 | 郊野公園加水站位置 | https://data.gov.hk/tc-data/dataset/hk-afcd-afcdlist-water-dispenser |
| 洗手間 | 郊野公園洗手間位置 | https://data.gov.hk/tc-data/dataset/hk-afcd-afcdlist-toilet |
| 郊野公園統計 | 訪客人次等統計數字 | https://data.gov.hk/tc-data/dataset/hk-afcd-afcdlist-country-park-statistic |

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · references/transport.md (reported line 158)May include surrounding context.

md
| 數據集 | 說明 | 官方頁面 |
|--------|------|----------|
| 露營地點 | 41個指定露營地詳情 | https://data.gov.hk/tc-data/dataset/hk-afcd-afcdlist-campsite |
| 加水站 | 郊野公園加水站位置 | https://data.gov.hk/tc-data/dataset/hk-afcd-afcdlist-water-dispenser |
| 洗手間 | 郊野公園洗手間位置 | https://data.gov.hk/tc-data/dataset/hk-afcd-afcdlist-toilet |
| 郊野公園統計 | 訪客人次等統計數字 | https://data.gov.hk/tc-data/dataset/hk-afcd-afcdlist-country-park-statistic |

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

This section presents difficulty ratings and time estimates as planning guidance but does not include any accompanying safety caveats about weather changes, trail conditions, navigation limits, daylight planning, hydration, or emergency response. In a hiking skill, users may rely on this information to make real-world outdoor decisions, so omission of basic risk warnings can contribute to preventable injuries, getting lost, heat stress, or being caught in hazardous conditions.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
96% confidence
Finding

The entire skill content is written in Traditional Chinese and framed as the default presentation, with no indication that users may choose another language or locale. Under the policy criteria, forcing a specific language without user opt-in is a natural-language policy violation unless the locale restriction is explicitly justified.

Content

No source excerpt is available for this finding.

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · references/transport.md (reported line 179)May include surrounding context.

md
### 即時公共交通查詢
- 香港公共交通路線及收費資料（官方API）：
  `https://static.data.gov.hk/td/routes-and-fares/ptroutefare.zip`
- 九巴路線查詢：`https://data.etabus.gov.hk/v1/transport/kmb/route/`
- 港鐵路線圖：`https://www.mtr.com.hk/`

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
88% confidence
Finding

The document title and all guidance are presented only in Traditional Chinese, and the API examples emphasize lang=tc while only briefly noting other API language parameters. There is no natural-language indication that users may choose their preferred language, which can violate a language/locale policy requiring user opt-in rather than forcing a specific locale.

Content

No source excerpt is available for this finding.

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 100)May include surrounding context.

九天天氣預報（免費，無需 API Key）

text
GET https://data.weather.gov.hk/weatherAPI/opendata/weather.php?dataType=fnd&lang=tc

參數：

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · references/weather-safety.md (reported line 18)May include surrounding context.

九天天氣預報（免費，無需 API Key）

text
GET https://data.weather.gov.hk/weatherAPI/opendata/weather.php?dataType=fnd&lang=tc

參數：

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · references/weather-safety.md (reported line 50)May include surrounding context.

九天天氣預報（免費，無需 API Key）

text
GET https://data.weather.gov.hk/weatherAPI/opendata/weather.php?dataType=fnd&lang=tc

參數：

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · references/weather-safety.md (reported line 58)May include surrounding context.

九天天氣預報（免費，無需 API Key）

text
GET https://data.weather.gov.hk/weatherAPI/opendata/weather.php?dataType=fnd&lang=tc

參數：

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
81% confidence
Finding

The example request hard-codes lang: "tc", which reflects a specific language/locale choice. Under the policy, forcing a locale without user opt-in can be a natural-language policy violation, and the document does not indicate that this is optional or based on user preference.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
84% confidence
Finding

The natural-language content is presented exclusively in Traditional Chinese, with no indication that the user can choose another language or that the document is intentionally limited to a Chinese-reading audience. Under the language/locale policy, forcing a specific language without opt-in can be a policy concern unless the locale restriction is clearly justified.

Content

No source excerpt is available for this finding.

Missing User Warnings

Low
Category
Not specified by scanner
Confidence
93% confidence
Finding

The file recommends beginner, intermediate, and advanced hiking routes but does not pair those recommendations with an explicit safety warning to verify current weather, trail conditions, closures, heat, and personal fitness before departure. In a hiking-planning skill, omission of these precautions can materially increase the risk of users attempting unsuitable or unsafe routes, especially because the same file references weather APIs and difficult trails, which may create a false sense of completeness.

Content

No source excerpt is available for this finding.