Security audit
Security checks for vulnerabilities and agentic risk
This skill is a disclosed TransJakarta transit CLI that fetches public bus data and stores local route cache data, with no evidence of hidden persistence, credential access, or harmful behavior.
Install this if you are comfortable with a CLI tool contacting transit.oyenza.com and keeping public TransJakarta route and stop metadata in a local cache. The main improvement would be narrower activation wording so ordinary bus questions do not invoke it unexpectedly.
The manifest description says to trigger on asking about bus ETAs, stop locations, route details, or 'any TransJakarta live data,' which is broad and lacks clear boundaries for when the skill should not activate. This can overlap with ordinary conversation about buses or route planning without explicitly requiring the CLI/API use case.
The natural-language instructions, examples, and operational guidance are presented entirely in Indonesian, effectively imposing a language/locale preference without any opt-in or explanation. Under the stated policy, language constraints should either be user-selectable or clearly justified as region-specific.
The trigger section includes generic keywords like 'bus,' 'halte,' 'kapan,' 'datang,' and even stop names, which are common in everyday speech and not specific enough on their own. The file does not provide negative examples or contextual limits to prevent accidental activation.
Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.
# Buat file config jika belum ada
mkdir -p ~/.qclaw-oversea/skills/transit-jakarta
# Config auto-generated on first run
Multiple docstrings and formatted user-visible strings are written only in Indonesian, such as arrival/age formatting outputs and function descriptions, with no indication that the user can choose another language. Under the policy, forcing a specific language or locale without opt-in is a natural-language policy violation unless clearly justified and documented.
This code performs outbound HTTP requests to a third-party transit service and writes returned data to local cache files, but it provides no user-facing logging, prompt, or warning about those actions. The module docstring identifies the API host, yet it does not disclose that runtime use will persist fetched data locally under a cache directory.
This code's user-facing help, usage, errors, and command descriptions are consistently presented in Indonesian, but there is no indication that the skill is intentionally region-locked or that users can opt into another language. Under the natural-language policy criteria, forcing a specific language without user choice can be a policy violation.
No suspicious patterns detected.