ClawHub
Back to skill

Security audit

特色民宿

Security checks across malware telemetry and agentic risk

Overview

This skill is a disclosed homestay search helper that sends travel search details to external proxy services, with no evidence of persistence, destructive behavior, or hidden local data access.

Install only if you are comfortable sending homestay search queries, destinations, dates, and preferences to the skill publisher's cloud proxy and downstream travel platforms. Avoid entering highly sensitive personal details in free-text searches; prices and booking actions happen on external travel sites.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (3)

Lp3

Medium
Category
MCP Least Privilege
Confidence
82% confidence
Finding
The skill declares no permissions, yet its own metadata and documentation clearly indicate external network access via a cloud proxy and travel platform APIs. This mismatch weakens transparency and security review because users and platforms cannot accurately assess what data leaves the environment, including destinations, dates, and other travel preferences. The context makes this more concerning because the skill explicitly forwards user queries to third-party services.

Missing User Warnings

Medium
Confidence
93% confidence
Finding
The skill sends user queries, destination names, POI names, and travel dates to external proxy services, but there is no user-facing notice or consent mechanism. In a travel assistant context this can expose behavioral and itinerary data to third parties, creating privacy and compliance risk even if the transport is HTTPS.

Missing User Warnings

Medium
Confidence
97% confidence
Finding
A proxy credential is sourced from the environment but also has a hardcoded default token in the code. Embedding a fallback secret in distributed code can lead to unauthorized reuse, proxy abuse, quota exhaustion, and difficulty rotating the credential once exposed.

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.