ClawHub
Back to skill

Security audit

search-hotel

Security checks across malware telemetry and agentic risk

Overview

This skill is a hotel-search integration that uses the RollingGo CLI as disclosed, with privacy and API-key handling cautions but no evidence of hidden or malicious behavior.

Before installing, be aware that hotel searches use RollingGo's external service and may transmit trip details such as location, travel dates, occupancy, budget, and preferences. Configure the API key through an environment variable or scoped host secret when possible, and avoid putting the key directly in command-line arguments.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (2)

Missing User Warnings

Medium
Confidence
95% confidence
Finding
The skill instructs the agent to send destination, dates, occupancy, budget, and preference data to the RollingGo external service, but it does not clearly warn the user that these trip details will leave the local environment. This creates a privacy and transparency issue because users may disclose sensitive travel plans without informed consent, especially when the skill can also retrieve booking URLs and detailed hotel data from a third-party API.

Missing User Warnings

Medium
Confidence
96% confidence
Finding
The document explicitly recommends passing the API key via the `--api-key` command-line argument, which can expose the secret in shell history, process listings, audit logs, and orchestration telemetry. In an agent/hosted execution context, this is more dangerous because command invocations are often logged centrally, so the key may be captured beyond the local machine.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.