Airport Transfer Guide

• Outcome: Pass
• Latest audit: May 29, 2026, 8:34 PM
• Version:
  1.0.0

Overview

This is a coherent airport-transfer helper that fetches public travel information and saves local output, with no evidence of hidden data access, exfiltration, or destructive behavior.

Reasonable to install if you want airport transfer help. Expect it to contact public airport/travel websites, run a local Python script, and save a local JSON file; if Chrome is available it may also try to create screenshots. Verify critical visa, immigration, baggage, and missed-connection decisions with the airline, airport, or official authority.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep
• MCP Least Privilege: Underdeclared Capability, Wildcard Permission, Missing Permission Declaration
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access

Findings (2)

Lp3

Medium

• Category: MCP Least Privilege
• Confidence: 90% confidence
• Finding: The skill explicitly requires outbound HTTPS access and invokes a local Python script that writes an output file, but it does not declare corresponding permissions in a structured permission model. This creates a capability/permission mismatch that can lead reviewers or runtime policy systems to underestimate what the skill can do, especially since network access and shell/script execution are central to its operation.

Context-Inappropriate Capability

Medium

• Confidence: 84% confidence
• Finding: The skill drives a local headless Chrome instance to load and render URLs from the airport registry, which expands the attack surface beyond simple transit-data fetching. If the registry is modified or contains attacker-controlled URLs, the agent will make outbound requests and process untrusted web content in a full browser context, creating SSRF-like behavior and increasing exposure to browser-based exploitation or unexpected local file generation.

VirusTotal

64/64 vendors flagged this skill as clean.