ClawHub
Back to skill

Security audit

旅游行李清单

Security checks across malware telemetry and agentic risk

Overview

This travel packing skill is mostly purpose-aligned, but it gives conflicting privacy information while sending destination data to an external weather proxy.

Install only if you are comfortable with destination and travel-context inputs being sent to the listed weather proxy. Prefer a corrected version that aligns the manifest with the actual commands and removes the contradictory no-external-requests claim.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (5)

Lp3

Medium
Category
MCP Least Privilege
Confidence
91% confidence
Finding
The skill documentation indicates external network use for weather retrieval, but the manifest/tool surface does not clearly declare that capability. Undeclared network access is dangerous because users and platform reviewers may assume the skill is purely local while destination and trip details are actually transmitted to an external service.

Intent-Code Divergence

High
Confidence
98% confidence
Finding
The file claims both that weather data is fetched via a proxy to the Amap weather API and that all data is local with no external requests. This contradiction is dangerous because it defeats informed consent and prevents accurate risk assessment of data exposure to third parties.

Intent-Code Divergence

Medium
Confidence
89% confidence
Finding
The manifest declares a tool named 'generate_list', while the documentation describes tools/surfaces named 'generate', 'check', and 'quick'. This mismatch is dangerous because it can mislead integrators and reviewers about the actual callable surface, increasing the chance of hidden behavior, incorrect security review, or accidental invocation paths.

Missing User Warnings

Medium
Confidence
94% confidence
Finding
The skill does not clearly warn users that destination and travel-related inputs may be sent to an external weather service. Even if the data seems low sensitivity, travel plans can reveal location, timing, family composition, and other personal context that should not be shared without transparent notice.

Missing User Warnings

Medium
Confidence
92% confidence
Finding
The skill sends user-supplied destination data to a third-party proxy service (`GAODE_PROXY`) for weather lookup without clear user disclosure or consent. Even if the data seems low sensitivity, travel destinations can reveal location intent, plans, or personal context, and the proxy introduces an unnecessary external trust boundary because it is not the official provider.

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.