ClawHub
Back to skill

Security audit

Landmark Hotel

Security checks for vulnerabilities and agentic risk

Overview

This hotel-search skill has a legitimate travel purpose, but it asks agents to install a global CLI automatically and keep hidden local logs of raw travel queries.

Review before installing. Use only if you trust the flyai/Fliggy CLI and are comfortable sharing travel searches with that service. Do not allow automatic global npm installation unless you approve the package and environment impact, and disable or delete the local execution log if you do not want raw trip details stored on disk.

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (3)

Missing User Warnings

Medium
Confidence
94% confidence
Finding
The skill directs the agent to install a global npm package and execute an external CLI, which modifies the host environment and runs third-party code without any explicit user confirmation or warning. In an agent setting, this can lead to unintended package installation, supply-chain exposure, and system changes that the user did not authorize.

Missing User Warnings

Medium
Confidence
95% confidence
Finding
The skill instructs sending travel queries and parameters to an external service through the flyai CLI without warning the user that their inputs may leave the local environment. This creates privacy and data-handling risk, especially if queries include dates, destinations, preferences, or other sensitive travel details.

Ssd 3

Medium
Confidence
95% confidence
Finding
The runbook explicitly records the raw `user_query` and appends the generated log to a local file, which creates persistent storage of potentially sensitive natural-language input. In a travel-booking context, user queries may contain personal data, trip details, locations, names, contact information, or booking preferences, so retaining them without minimization, redaction, or retention controls increases privacy and disclosure risk.

Static analysis

No suspicious patterns detected.