ClawHub
Back to skill

Security audit

无障碍旅行助手

Security checks across malware telemetry and agentic risk

Overview

The skill mainly provides local accessibility travel lookups, but it also includes under-explained token and network code that conflicts with its local-only claim.

Review this skill before installing. Its advertised functions appear to use embedded local data and I found no active exfiltration path, but the publisher should remove or clearly document the PROXY_TOKEN and outbound request helper before this is treated as a fully local, zero-network travel guide.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (3)

Lp3

Medium
Category
MCP Least Privilege
Confidence
89% confidence
Finding
The skill declares tool configurations that reference an environment variable token (`PROXY_TOKEN`) and static analysis inferred network capability, yet the document claims 'all data is local' and does not declare corresponding permissions. This mismatch can hide external data access or secret usage from reviewers and users, weakening transparency and consent around network and credential use.

Context-Inappropriate Capability

Medium
Confidence
87% confidence
Finding
The skill’s stated purpose is to query built-in accessibility travel data, yet it includes a generic outbound HTTPS helper and support for attaching a bearer token from the environment. Even though the helper is not currently invoked, this is unnecessary latent capability that could be used to exfiltrate data or quietly add remote dependencies later, increasing attack surface beyond the declared functionality.

Env Variable Harvesting

High
Category
Data Exfiltration
Content
import urllib.request
import urllib.parse

PROXY_TOKEN = os.environ.get("PROXY_TOKEN", "")
ALLOWED_DOMAINS = [
    "1439498936-6sysdjjt99.ap-guangzhou.tencentscf.com",
    "1439498936-bl10af74fl.ap-guangzhou.tencentscf.com",
Confidence
84% confidence
Finding
os.environ.get("PROXY_TOKEN

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal

Static analysis

No suspicious patterns detected.