Security audit

weekend-escape

Security checks for vulnerabilities and agentic risk

Overview

This is a disclosed weekend travel-planning skill that may use FlyAI travel searches, with no evidence of hidden code, persistence, credential access, or automatic booking.

Use this skill only if you are comfortable sharing travel-planning details with FlyAI. Treat booking, payment, or account-changing actions as outside the reviewed behavior and require explicit confirmation before any such step.

SkillSpector

Vulnerability Patterns

Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (3)

Vague Triggers

Medium

Confidence: 95% confidence
Finding: The skill metadata description and usage cues are broad enough that ordinary travel-related phrases like '周末去哪玩' or '推荐个短途旅行' could trigger the skill in contexts where the user did not explicitly intend to invoke it. This can cause unintended activation, leading to irrelevant tool use, unnecessary data lookups, and possible disclosure or processing of user travel preferences without clear consent.

Vague Triggers

Medium

Confidence: 97% confidence
Finding: The trigger section uses ambiguous natural-language conditions like '想逃离城市' and '这周太累了，想出去透透气,' which are common conversational expressions and not sufficiently scoped to a concrete travel-planning request. In this skill, that ambiguity is more dangerous because activation can cascade into external searches for flights, hotels, and POIs, increasing the chance of unnecessary tool invocation and unintended handling of user context.

Vague Triggers

Medium

Confidence: 90% confidence
Finding: The skill advertises very broad, everyday trigger phrases such as '周末去哪玩' and '推荐个短途旅行' without clear scope boundaries, exclusions, or disambiguation rules. This can cause over-invocation in unrelated conversations, leading the agent to inject travel-planning behavior when the user intent is ambiguous, which is a genuine skill-routing and prompt-scope weakness even though it is not overtly malicious.

Static analysis

No suspicious patterns detected.