Skills/ClawHub/trip-scout

trip-scout@1.0.0

VERIFIED· install only

Publisher claims: "个人/家庭机酒搜索和自驾游行程规划助手。双场景驱动：场景一（机酒搜索）飞猪+携程双平台搜索， 智能酒店筛选（品牌信任梯度、加盟/直营识别、差评分析、多维度评价分析、黑榜），自进化学习； 机票价格监控（携程API抓取+价格历史+入手区间分析+降价预测+flyai交叉验证）； 场景二（自驾游行程规划）小红书路线推荐→酒店联动调整→地图渲染（H5行程页+高德专属地图双轨）→飞书攻略生成； 租车网点查询（神州租车API+一嗨租车页面解析，查城市取还车网点）。 触发词：搜机票、搜酒店、找酒店、订机票、机酒搜索、监控机票、机票价格、入手时机、自驾游、行程规划、路线推荐、 租车网点、租车门店、取车点、还车点、car rental stores、road trip、trip plan、travel search、flight search、hotel search。" Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher treesan · publishing for 68 daysInstalls 315Last detonated 7d ago
$clawhub install trip-scout
WatchReport an issue

Coverage

Nothing executable in the bundle ran; the trace covers the install step only.
Tested
every file read, file written and host contacted by what ran
Not tested
use of the skill by an agent

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario; nothing executable in the bundle ran; the trace covers the install step only) on 2026-11-07 and scored it 86/100 (Verified). In what ran, nothing we could detect went wrong: no undeclared network egress, no credential reads, no persistent instruction writes. What it does with a real credential was not observed; the static findings and the publisher carry the rest of the score. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 1 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only
0.0sprocessno install scripts to re-run

Static findings

MEDIUM
Python subprocess execution detectedvendor/xhs_api/apis/xhs_pc_login_apis.py:366 · Python subprocess execution detectedsubprocess.Popen(['xdg-open', path])Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedvendor/xhs_api/apis/xhs_pc_login_apis.py:362 · Python subprocess execution detectedsubprocess.Popen(['open', path])Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
npx invocation of non-well-known packageSKILL.md:528 · npx invocation of non-well-known package — may execute untrusted code| **meituan-travel** | 美团酒旅（酒店比价起步价+口碑评分补充+餐厅兜底） | `npx @meituan-travel/ht-ai`，需 `MEITUAN_HT_TOKEN` |Fix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
Python subprocess execution detectedscripts/flight_monitor.py:616 · Python subprocess execution detectedresult = subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
HIGH
Access to sensitive file pathsvendor/xhs_api/xhs_utils/common_util.py:6 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files移除了 load_env/init（trip-scout 不使用 .env 方式管理 cookie）。Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05

Cost to the agent

Instructions loaded
≈5,123 tok
1 file · 48 in bundle

Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.

Known vulnerabilities

Vulnerability advisories (OSV) cover npm and PyPI packages; this registry has no advisory database.