Security audit

China Travel

Security checks for vulnerabilities and agentic risk

Overview

This is a markdown-only travel planning skill with broad routing and mostly Chinese reference material, but no hidden code, persistence, credential use, or destructive behavior.

This skill appears safe to install as travel-planning reference material. Users should be aware that it may activate for broad travel requests and that much of the detailed guidance is in Chinese; verify travel document and visa requirements with official sources before acting on them.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (3)

Vague Triggers

Medium

Confidence: 93% confidence
Finding: The manifest description uses very broad activation language such as general trip planning, family travel, cost optimization, and complex travel coordination without clear scope limits. This can cause the skill to trigger on routine travel-related user requests too aggressively, leading to misrouting, unnecessary delegation, or unreviewed access to travel-planning context and downstream references.

Vague Triggers

Medium

Confidence: 91% confidence
Finding: The usage examples are framed as common everyday travel requests and do not include disambiguating constraints, making the skill appear applicable to a wide range of generic user intents. In skill-routing systems, this broad phrasing can over-match unrelated travel queries and increase the chance that the skill is selected when a narrower or safer tool would be more appropriate.

Natural-Language Policy Violations

Low

Confidence: 92% confidence
Finding: This markdown skill presents all guidance exclusively in Chinese, which can amount to a language/locale policy violation when users are not given an opt-in or alternative language option. The file does not indicate that the skill is region-specific or intentionally limited to Chinese-speaking users.

Static analysis

No suspicious patterns detected.