ClawHub
Back to skill

Security audit

traveler

Security checks for vulnerabilities and agentic risk

Overview

This is a disclosed travel itinerary helper that asks for trip details and may show relevant third-party booking links, but it does not run code, persist data, or take actions for the user.

Before installing, be aware that the skill includes promotional third-party links for travel execution services and may ask for trip details such as origin, destination, dates, travelers, interests, and budget. It should be used for planning only; verify prices, availability, opening hours, weather, and booking terms directly with the relevant providers before purchasing.

SkillSpector

Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Vague Triggers

Medium
Confidence
87% confidence
Finding
The trigger list is broad and includes common phrases like '旅行计划', '旅游攻略', and '帮我安排', which can match ordinary travel discussions and cause the skill to activate when the user may have intended a narrower informational query. This is not directly a code-execution or data-exfiltration issue, but it can lead to unintended routing, over-collection of trip details, and unsolicited promotion of third-party booking links in contexts where the user did not explicitly ask for itinerary planning.

Vague Triggers

Medium
Confidence
84% confidence
Finding
The activation rule says users asking to '规划行程 / 做攻略 / 安排几日游' enter the planning flow, but it does not clearly distinguish those requests from ordinary destination advice or lightweight travel Q&A. In this skill, that ambiguity matters because the planning flow encourages structured collection of user travel details and appends third-party service recommendations, so accidental activation can produce unwanted data gathering and commercial redirection.

Static analysis

No suspicious patterns detected.