ClawHub
Back to skill

Security audit

航班动态追踪

Security checks across malware telemetry and agentic risk

Overview

This flight-tracking skill appears to do what it claims, but it sends queries through an external proxy and includes a reusable proxy token in the source.

Before installing, understand that your flight numbers, routes, dates, and airport/weather queries will be sent to the skill publisher's proxy service and then to VariFlight. Avoid entering sensitive itinerary details if you do not trust that proxy. The embedded fallback token is poor secret hygiene and the publisher should rotate/remove it, but the reviewed artifacts do not show hidden persistence, local data collection, destructive actions, or behavior outside the stated flight-tracking purpose.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Findings (4)

Lp3

Medium
Category
MCP Least Privilege
Confidence
93% confidence
Finding
The skill declares use of a sensitive environment variable (`primaryEnv: PROXY_TOKEN`) and explicitly describes a networked data flow through a proxy service and external API, yet no permissions are declared. This creates a trust and governance gap: an agent may gain network and secret-backed capabilities without explicit user/admin approval, increasing the risk of unintended data egress or misuse of credentials.

Intent-Code Divergence

High
Confidence
98% confidence
Finding
The code claims the API key is hidden on the proxy side, yet it embeds a default proxy token directly in the client script. Anyone with access to the skill source can reuse that token against the proxy, potentially consuming quota, impersonating the skill, or accessing backend functionality outside intended controls.

Vague Triggers

Medium
Confidence
81% confidence
Finding
The trigger patterns are broad enough to match common travel-related conversation, including generic terms like '北京', '上海', '天气', and airline-style flight numbers. Over-broad routing can cause this skill to activate unintentionally, sending user queries to external tools or services when the user did not explicitly intend to use this flight-tracking integration.

Ssd 3

High
Confidence
99% confidence
Finding
A hardcoded fallback proxy token is a live credential exposure risk. If the environment variable is absent, the program still authenticates with a static secret that can be extracted from source control, redistributed, and abused by third parties.

VirusTotal

63/63 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.