ClawHub
Back to skill

Security audit

flight-delay-compensation

Security checks across malware telemetry and agentic risk

Overview

This skill is a coherent offline flight-compensation checker with optional local file exports, but users should choose output paths carefully because generated claim files may contain personal travel details.

Install is reasonable for an offline claim-checking workflow. When generating letters or JSON, save them only to a location you trust, review personal details before sharing, and avoid overwriting existing files with the --letter or --json path.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (4)

Lp3

Medium
Category
MCP Least Privilege
Confidence
91% confidence
Finding
The skill advertises executable shell usage and file read/write behavior via its quick-start commands and claim-letter generation, but it declares no permissions. That mismatch is a real security issue because an agent or platform may expose capabilities the skill implicitly relies on without giving users or reviewers clear visibility into local file access and command execution risk.

Description-Behavior Mismatch

Medium
Confidence
93% confidence
Finding
The skill accepts arbitrary filesystem paths for --letter and --json and writes user-influenced content to those locations without restriction or confirmation. In an agent context, this can overwrite files the current user can access, causing integrity loss or unintended persistence of sensitive data outside the expected skill workspace.

Missing User Warnings

Low
Confidence
89% confidence
Finding
The generated claim letter contains personal and financial claim information such as passenger name, booking reference, travel details, and IBAN placeholder, and it is written to disk without an explicit privacy warning. This increases the risk of local disclosure through shared machines, synced folders, backups, or later unintended access by other processes/users.

Missing User Warnings

Low
Confidence
88% confidence
Finding
The JSON export persists potentially sensitive travel-claim data, including itinerary, disruption details, and claim posture, to disk without explicit disclosure. While not remote code execution, it creates a privacy and data-handling risk because users may not expect local storage or may choose unsafe paths.

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.