ClawHub
Back to skill

Security audit

航班延误赔偿助手

Security checks across malware telemetry and agentic risk

Overview

This skill does what it claims: it checks flight delay information through an external proxy and generates compensation guidance, but users should know flight details are sent to that service.

Install only if you are comfortable sending flight numbers and dates to the listed cloud proxy/flight-data service. Avoid entering unnecessary personal details; the passenger name is used for the local letter template, but flight lookups still go off-device. The publisher should replace the embedded fallback token with a properly scoped managed secret and make the external-data disclosure more prominent.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (5)

Lp3

Medium
Category
MCP Least Privilege
Confidence
93% confidence
Finding
The skill declares use of a proxy token and a cloud-forwarded flight lookup API, which introduces network and environment-secret capabilities without any explicit permission boundary or user-facing disclosure in the skill contract. This is dangerous because users and platform operators may not realize that flight query data and authentication material are being used externally, reducing transparency and weakening review of data handling and outbound access.

Vague Triggers

Medium
Confidence
76% confidence
Finding
The example invocations are broad and optimized for easy triggering, but they do not define clear boundaries for when the skill should or should not activate. This can cause unintended invocation and accidental transmission of travel-related user input to external services, especially in a conversational environment where similar phrases may appear incidentally.

Missing User Warnings

Medium
Confidence
95% confidence
Finding
The skill mentions cloud proxy forwarding in the data-flow section, but it does not provide a clear, prominent warning at the point of use that user-entered flight details will be transmitted to a third-party service. This is dangerous because users may disclose itinerary information without informed consent, creating privacy and compliance risk around sharing travel metadata with external processors.

Missing User Warnings

Medium
Confidence
83% confidence
Finding
The skill sends user-supplied flight numbers and dates to a remote proxy service without an explicit user-facing disclosure or consent step. Even if the data seems low sensitivity, travel details can reveal personal itinerary information, and routing them through an opaque intermediary increases privacy and supply-chain risk.

Env Variable Harvesting

High
Category
Data Exfiltration
Content
# ========== 配置 ==========
SCF_PROXY_URL = "https://1439498936-eqcpuaevzz.ap-guangzhou.tencentscf.com"
PROXY_TOKEN = os.environ.get("PROXY_TOKEN", "tp_8k2mX9vQ4z")

# 代理域名白名单
_ALLOWED_PROXY_HOSTS = ["ap-guangzhou.tencentscf.com"]
Confidence
97% confidence
Finding
os.environ.get("PROXY_TOKEN

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.