ctrip-flight
What this skill does
This skill is a flight booking assistant that interacts with an external AI flight service to perform tasks such as flight searches, booking, order cancellation, and modifications. It requires user au
github/leoyeai - Data Exfiltration - 2.1k stars
Threat analysis
Skill info
pkg:github/LeoYeAI/openclaw-master-skills@e5199b5?skill=ctrip-flightAssessments (4)
Data Exfiltration
Data Exfiltration via local-llm-review
scripts/auth.py
The script sends user phone numbers and verification codes to an external API without encryption or clear user consent beyond a general statement in the README. This could be used for SIM swapping or Data Exfiltration via local-llm-review
scripts/create_order.py
The script sends user personal information (passenger name, phone, ID) to an external API without encryption or clear user consent beyond a general statement in the README. This is a significant privaInsecure API Communication
Insecure API Communication via local-llm-review
scripts/common.py
The script uses `os.environ.get("FBT_API_URL", "https://app-gate.fenbeitong.com/air_biz/skill/execute")` to determine the API endpoint. If this URL is not secure (e.g., not using HTTPS), it could expoInsecure Storage
Insecure Storage via local-llm-review
scripts/common.py
The script stores the apiKey and user phone number in a temporary file (`~/.fbt_auth.json`) without encryption. This file is stored on the local filesystem and could be accessed by other users or maliBadge
Add the Anomity scan badge for ctrip-flight to your README.
How Anomity governs this at runtime
Scan-time vetting tells you what a skill says it will do. Anomity's Endpoint Sensor sees what agents actually do: it discovers skills alongside every other AI artifact on the endpoint, and runtime governance can allow, deny, or log the tool calls a skill triggers. Policy violations route to your SIEM, Slack, email, or Jira, backed by a queryable 90-day audit trail.
Book a 30-minute demo to see your own skill inventory.
Methodology and disputes
Every skill is assessed by the Anomity Skill Intelligence engine against its public source; findings indicate risk patterns, not confirmed exploitation. Maintainer of ctrip-flight? Report an issue or request a rescan.
