ClawHub
Back to skill

Security audit

潜水旅行助手

Security checks across malware telemetry and agentic risk

Overview

This travel skill is purpose-aligned and discloses its external travel lookups, though users should understand that trip details are sent through cloud proxy services.

Install only if you are comfortable sending travel search details such as cities, destinations, dates, and location preferences through the skill’s cloud proxy to travel and mapping providers. Avoid entering highly sensitive personal information; use booking links directly with providers for purchases or account actions.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (4)

Lp3

Medium
Category
MCP Least Privilege
Confidence
77% confidence
Finding
The skill advertises cloud-routed flight, hotel, transport, and mapping lookups but does not declare corresponding permissions or clearly scope its network/environment use. That mismatch reduces transparency and can let data egress or runtime behavior occur outside what a user or reviewer would reasonably expect.

Context-Inappropriate Capability

Medium
Confidence
98% confidence
Finding
The code embeds a default proxy token (`tp_8k2mX9vQ4z`) so outbound proxy access remains enabled even when the operator has not explicitly configured credentials. This weakens deployment control, may expose a shared credential to anyone with code access, and can cause unintended data transmission to external proxy services.

Missing User Warnings

Medium
Confidence
91% confidence
Finding
The skill states that flight, hotel, and transport requests are forwarded to Feizhu, Amap, and RG, but it does not give a clear upfront warning that user travel details will be sent to third-party booking/mapping providers. Users may disclose origin, destination, dates, and location preferences without informed consent, creating privacy and data-sharing risk.

Missing User Warnings

Medium
Confidence
91% confidence
Finding
The helper sends user-supplied travel queries and related parameters to third-party proxy endpoints over the network without any visible disclosure or consent mechanism in the skill. Even if transport uses HTTPS, this still creates a privacy and data-governance risk because destinations, dates, and other user travel details are exfiltrated to external services by default.

VirusTotal

1/65 vendors flagged this skill as malicious, and 64/65 flagged it as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.