ClawHub
Back to skill

Security audit

旅行美食助手

Security checks across malware telemetry and agentic risk

Overview

This travel food skill is purpose-aligned and discloses its map-proxy data flow, though its embedded fallback proxy token is a credential hygiene issue.

Install only if you are comfortable sending travel food searches and location terms to the publisher's proxy and the underlying map POI service. Avoid highly sensitive home, workplace, or private itinerary locations. The publisher should remove or rotate the embedded fallback token and rely on a securely provided PROXY_TOKEN.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (3)

Lp3

Medium
Category
MCP Least Privilege
Confidence
92% confidence
Finding
The skill declares no permissions, but its instructions and metadata indicate access to an environment variable (`PROXY_TOKEN`) and outbound network access via a proxy service / map POI service. This creates a mismatch between the declared trust surface and the actual capabilities, which can mislead reviewers and users and allow sensitive data or user queries to be sent externally without explicit permission disclosure.

Context-Inappropriate Capability

Medium
Confidence
92% confidence
Finding
The skill routes requests through a remote Tencent SCF proxy and even embeds a fallback proxy token in code, which expands the trust boundary beyond the stated food-guide function. A travel recommendation skill does not obviously require an opaque external relay, so this creates unnecessary exposure of user queries and operational secrets to an intermediate service.

Missing User Warnings

Medium
Confidence
95% confidence
Finding
User-supplied location text is geocoded and transmitted off-box, and authenticated proxy requests include a proxy token, without any disclosure or consent mechanism. In a travel context, location data can be sensitive because it reveals a user's itinerary, current whereabouts, or habits, making silent transmission more privacy-impacting than a generic search query.

VirusTotal

63/63 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.