Security checks for vulnerabilities and agentic risk
Overview
This is a coherent offline travel-planning skill with disclosed local scripts and static reference data, with some privacy and install-scope cautions but no artifact-backed malicious behavior.
Before installing, prefer a pinned marketplace/package version and treat generated booking-ready data or public planning links as something to share only after user consent. The skill appears offline by default, but users should review any operator-provided URLs before sending itinerary, date, passenger, or budget details to external services.
The declared description emphasizes an AI-agent travel-planning skill with a specific planning methodology and structured conversation flow. The supplied code does not implement agent transformation, planning logic, conversational orchestration, or any 9-dimension planning model. Instead, it is a standalone export script that converts itinerary JSON into Google Maps links and optional KML output. This is a materially different primary purpose and includes undeclared export capabilities.
Content
No source excerpt is available for this finding.
Tp4
High
Category
MCP Tool Poisoning
Confidence
99% confidence
Finding
The declared description promises a travel-planning skill with a structured progressive planning model for AI agents. The supplied code does not implement any agent transformation, planning workflow, conversation flow, or travel recommendation logic. Its sole function is to generate a JSON reference file containing airport data. While airport reference data could support a travel application, this code chunk’s primary purpose is data generation, which is materially different from the declared skill behavior.
Content
No source excerpt is available for this finding.
Tp4
High
Category
MCP Tool Poisoning
Confidence
99% confidence
Finding
The declared description is about travel-planning behavior for an AI agent, but the supplied code does not perform travel planning, conversation structuring, or itinerary logic. Instead, it is a repository auditing script focused on static security/trust checks over local project files. This is a materially different primary purpose and introduces undeclared capabilities related to compliance and security scanning.
Content
No source excerpt is available for this finding.
Ae1
High
Category
analysis-evasion
Confidence
100% confidence
Finding
Referenced artifact was not completely inspected
Content
Scanner excerpt · SKILL.md (reported line 197)May include surrounding context.
md
- `destinations.json` — 200 global destinations with coordinates, costs, best months, highlights
Ae1
High
Category
analysis-evasion
Confidence
100% confidence
Finding
Referenced artifact was not completely inspected
Content
Scanner excerpt · SKILL.md (reported line 329)May include surrounding context.
md
- `destinations.json` — 200 global destinations with coordinates, costs, best months, highlights
Credential Access
High
Category
Privilege Escalation
Confidence
70% confidence
Finding
Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.
Content
Scanner excerpt · scripts/socket-review-check.sh (reported line 39)May include surrounding context.
sh
pass "SKILL.md license remains MIT-0."
# 4) Spot obvious credential-like strings in tracked content.
if rg -n "AKIA[0-9A-Z]{16}|ghp_[A-Za-z0-9]{36}|sk-[A-Za-z0-9]{20,}|xox[baprs]-[A-Za-z0-9-]{20,}" SKILL.md scripts references README.md >/tmp/socket-review-secrets.txt; then
cat /tmp/socket-review-secrets.txt >&2
fail "Potential credential pattern detected."
fi
Credential Access
High
Category
Privilege Escalation
Confidence
70% confidence
Finding
Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.
Content
Scanner excerpt · scripts/socket-review-check.sh (reported line 40)May include surrounding context.
sh
pass "SKILL.md license remains MIT-0."
# 4) Spot obvious credential-like strings in tracked content.
if rg -n "AKIA[0-9A-Z]{16}|ghp_[A-Za-z0-9]{36}|sk-[A-Za-z0-9]{20,}|xox[baprs]-[A-Za-z0-9-]{20,}" SKILL.md scripts references README.md >/tmp/socket-review-secrets.txt; then
cat /tmp/socket-review-secrets.txt >&2
fail "Potential credential pattern detected."
fi
Rp1
Medium
Category
MCP Rug Pull
Confidence
70% confidence
Finding
npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.
Content
No source excerpt is available for this finding.
Undeclared Tool Scope
Medium
Category
MCP Least Privilege
Confidence
86% confidence
Finding
The skill declares no explicit tool-scope or permission boundaries, yet its documented capabilities include shell execution, local file writing, and generation of network URLs. Even if the authors intend offline-only behavior, the absence of a formal allowlist increases the risk that an agent platform grants broader-than-necessary access or invokes the skill in unsafe contexts.
Content
No source excerpt is available for this finding.
Vague Triggers
Medium
Category
Not specified by scanner
Confidence
92% confidence
Finding
The off-topic handling directs the skill to redirect broad non-travel requests into travel-oriented responses, which creates overbroad activation and weakens task-boundary enforcement. In agentic environments, this can cause the skill to engage when it should abstain, increasing the chance of inappropriate handling of sensitive domains like medical or technical queries.
Content
No source excerpt is available for this finding.
Missing User Warnings
Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding
The file explicitly describes generating booking-ready structured travel data and allowing operator-provided public URLs at runtime, but it provides no user-facing warning, consent boundary, or data-handling constraints. Because itinerary details, destinations, dates, and passenger counts are personal travel metadata, silent downstream sharing to booking or search providers can expose sensitive behavioral and location information.
Content
No source excerpt is available for this finding.
External Transmission
Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content
Scanner excerpt · references/booking-integrations.json (reported line 5)May include surrounding context.
json
"description": "Booking integration placeholders. Kontour AI is building direct booking integrations. For now, the skill generates booking-ready structured data. Operator-provided approved public URLs may be added at runtime; this bundle does not include deployment or preview hostnames.",
"integrations": {
"flights": [
{"provider": "Amadeus", "api_endpoint": "https://api.amadeus.com/v2/shopping/flight-offers", "supported_regions": ["global"], "integration_status": "planned", "capabilities": ["search", "price", "book", "seat-selection"], "note": "GDS with widest airline coverage. Kontour will use for fare search and booking."},
{"provider": "Sabre", "api_endpoint": "https://api.sabre.com/v2/shop/flights", "supported_regions": ["global"], "integration_status": "planned", "capabilities": ["search", "price", "book"], "note": "Strong in North America. Backup GDS for redundancy."},
{"provider": "Travelport", "api_endpoint": "https://api.travelport.com/air/search", "supported_regions": ["global"], "integration_status": "planned", "capabilities": ["search", "price", "book"], "note": "Galileo/Worldspan/Apollo unified API."},
{"provider": "Google Flights (ITA Matrix)", "api_endpoint": "https://www.google.com/travel/flights", "supported_regions": ["global"], "integration_status": "planned", "capabilities": ["search", "price-compare"], "note": "For price comparison and flexible date search. No direct booking."},
External Transmission
Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content
Scanner excerpt · references/booking-integrations.json (reported line 6)May include surrounding context.
json
"integrations": {
"flights": [
{"provider": "Amadeus", "api_endpoint": "https://api.amadeus.com/v2/shopping/flight-offers", "supported_regions": ["global"], "integration_status": "planned", "capabilities": ["search", "price", "book", "seat-selection"], "note": "GDS with widest airline coverage. Kontour will use for fare search and booking."},
{"provider": "Sabre", "api_endpoint": "https://api.sabre.com/v2/shop/flights", "supported_regions": ["global"], "integration_status": "planned", "capabilities": ["search", "price", "book"], "note": "Strong in North America. Backup GDS for redundancy."},
{"provider": "Travelport", "api_endpoint": "https://api.travelport.com/air/search", "supported_regions": ["global"], "integration_status": "planned", "capabilities": ["search", "price", "book"], "note": "Galileo/Worldspan/Apollo unified API."},
{"provider": "Google Flights (ITA Matrix)", "api_endpoint": "https://www.google.com/travel/flights", "supported_regions": ["global"], "integration_status": "planned", "capabilities": ["search", "price-compare"], "note": "For price comparison and flexible date search. No direct booking."},
{"provider": "Kiwi.com", "api_endpoint": "https://api.tequila.kiwi.com/v2/search", "supported_regions": ["global"], "integration_status": "planned", "capabilities": ["search", "price", "multi-city", "nomad"], "note": "Strong for complex multi-city and budget routes."}
External Transmission
Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content
Scanner excerpt · references/booking-integrations.json (reported line 7)May include surrounding context.
json
"flights": [
{"provider": "Amadeus", "api_endpoint": "https://api.amadeus.com/v2/shopping/flight-offers", "supported_regions": ["global"], "integration_status": "planned", "capabilities": ["search", "price", "book", "seat-selection"], "note": "GDS with widest airline coverage. Kontour will use for fare search and booking."},
{"provider": "Sabre", "api_endpoint": "https://api.sabre.com/v2/shop/flights", "supported_regions": ["global"], "integration_status": "planned", "capabilities": ["search", "price", "book"], "note": "Strong in North America. Backup GDS for redundancy."},
{"provider": "Travelport", "api_endpoint": "https://api.travelport.com/air/search", "supported_regions": ["global"], "integration_status": "planned", "capabilities": ["search", "price", "book"], "note": "Galileo/Worldspan/Apollo unified API."},
{"provider": "Google Flights (ITA Matrix)", "api_endpoint": "https://www.google.com/travel/flights", "supported_regions": ["global"], "integration_status": "planned", "capabilities": ["search", "price-compare"], "note": "For price comparison and flexible date search. No direct booking."},
{"provider": "Kiwi.com", "api_endpoint": "https://api.tequila.kiwi.com/v2/search", "supported_regions": ["global"], "integration_status": "planned", "capabilities": ["search", "price", "multi-city", "nomad"], "note": "Strong for complex multi-city and budget routes."}
],
External Transmission
Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content
Scanner excerpt · references/booking-integrations.json (reported line 9)May include surrounding context.
