ClawHub
Back to skill

Security audit

hk-hiking

Security checks for vulnerabilities and agentic risk

Overview

This is a Hong Kong hiking planning skill made of Markdown references and public data lookups, with no evidence of hidden execution, credential use, or persistence.

Install only as a planning aid. Before an actual hike, verify current Hong Kong Observatory warnings, official trail or facility status, transport changes, daylight, water needs, equipment, and emergency plans; do not treat static route estimates as a safety guarantee.

SkillSpector

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (1)

Missing User Warnings

Medium
Confidence
89% confidence
Finding
This section provides hiking difficulty, suitability, and time-adjustment guidance that users may rely on for real-world outdoor decisions, but it does so without prominent safety caveats, weather/closure verification advice, or direction to check official sources. In a hiking-planning skill, outdated or overgeneralized guidance can contribute to users underestimating terrain, weather, or route hazards, increasing the risk of injury or becoming stranded.

Static analysis

No suspicious patterns detected.