ClawHub
Back to skill

Security audit

亲子出行助手

Security checks across malware telemetry and agentic risk

Overview

This family travel skill is coherent and purpose-aligned, but users should understand that attraction and weather queries are sent to external proxy services.

Install only if you are comfortable sending family travel destinations, city names, attraction keywords, and weather lookup locations to the skill's proxy services. Avoid entering highly sensitive itinerary details beyond what is needed, and treat the hard-coded proxy token as a publisher security issue rather than a direct sign of malware.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (4)

Lp3

Medium
Category
MCP Least Privilege
Confidence
89% confidence
Finding
The skill declares access to an environment variable via `primaryEnv: PROXY_TOKEN` and describes sending user queries to external proxy-backed APIs, but no explicit permissions model is documented. This creates a real least-privilege and transparency issue: operators and users cannot clearly audit what network/env access the skill requires, and a proxy token could be misused if the skill or backend behavior changes.

Missing User Warnings

Medium
Confidence
82% confidence
Finding
The attractions workflow sends user-provided city and keyword/location-related queries to external services without any visible disclosure or consent mechanism. Even if the data is not highly sensitive on its own, travel interests and destination queries can reveal personal plans, family composition, and location context to third-party operators.

Missing User Warnings

Medium
Confidence
84% confidence
Finding
The weather lookup forwards destination/city data to an external proxy service without a user-facing warning. In a family travel context, destination data can expose current or planned travel locations, making this more sensitive than a generic weather lookup because it concerns family movement and itinerary planning.

Env Variable Harvesting

High
Category
Data Exfiltration
Content
SCF_FLIGGY_URL = "https://1439498936-6sysdjjt99.ap-guangzhou.tencentscf.com"
SCF_TUNIU_URL = "https://1439498936-0junm3maxj.ap-guangzhou.tencentscf.com"
GAODE_PROXY = "https://gaode-proxy-jerspxcked.cn-hangzhou.fcapp.run"
PROXY_TOKEN = os.environ.get("PROXY_TOKEN", "tp_8k2mX9vQ4z")

HEADERS = {
    "Content-Type": "application/json",
Confidence
87% confidence
Finding
os.environ.get("PROXY_TOKEN

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.