ClawHub
Back to skill

Security audit

机票/酒店/旅行降价监控助手

Security checks for vulnerabilities and agentic risk

Overview

This skill is openly a travel price tracker, but its background monitoring plus optional automatic booking could create real financial commitments without enough visible safeguards.

Review this skill carefully before installing. It is suitable only if you want background Fliggy price monitoring, and you should leave auto_book disabled unless the runtime provides explicit controls for maximum price, payment method, traveler details, refundable-only rules, task cancellation, and a final confirmation before any booking is placed.

SkillSpector

Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Vague Triggers

Medium
Confidence
86% confidence
Finding
The manifest uses broad trigger phrases such as price reminders, deal monitoring, and auto-booking for common travel-shopping scenarios, which can cause the skill to activate in situations where the user did not explicitly ask for this specific automation. In this skill’s context, overbroad routing is more dangerous because it can lead users into a workflow that schedules background monitoring and potentially places orders, increasing the chance of unintended commerce actions.

Missing User Warnings

High
Confidence
97% confidence
Finding
The skill advertises automatic booking but does not prominently warn that it may place a real order with financial consequences once price conditions are met. This is especially risky here because the workflow includes unattended cron-based monitoring and explicit auto-purchase logic, so a user could authorize or trigger a live transaction without understanding timing, refundability, inventory changes, or charge implications.

Static analysis

No suspicious patterns detected.