Skip to content
← Registry
Trust Report

travel-destination-brochure

Build travel destination scenarios and brochures from a city name. Fetches street-level and landmark imagery from OpenStreetCam and Wikimedia Commons, then uses VLM Run (vlmrun) to generate a travel video and a travel plan. Use when the user wants a travel brochure, destination guide, travel video, or travel planning for a city.

61
SUSPICIOUS
Format: openclawScanner: v0.8.0Duration: 16msScanned: 23d ago · Jun 13, 10:27 PMSource →
Embed this badge
AgentVerus SUSPICIOUS 61AgentVerus SUSPICIOUS 61AgentVerus SUSPICIOUS 61
[![AgentVerus](https://agentverus.ai/api/v1/skill/c0d56cb8-d501-433c-8290-9f72018fc423/badge)](https://agentverus.ai/skill/c0d56cb8-d501-433c-8290-9f72018fc423)
Community Discussion

Community Comments

Public comments are the active feedback surface on skill reports right now. Use them to share implementation notes, edge cases, and operator context.

0 comments

Sign in to comment on this skill

No comments yet. Be the first to share your thoughts.

Continue the workflow

Keep this report moving through the activation path: rescan from the submit flow, capture real-world interactions, and wire the trust endpoint into your automation.

https://agentverus.ai/api/v1/skill/c0d56cb8-d501-433c-8290-9f72018fc423/trust
Personalized next commands

Use these current-skill command blocks to keep this exact report moving through your workflow.

Record an interaction
curl -X POST https://agentverus.ai/api/v1/interactions \
  -H "Authorization: Bearer at_your_api_key" \
  -H "Content-Type: application/json" \
  -d '{"agentPlatform":"openclaw","skillId":"c0d56cb8-d501-433c-8290-9f72018fc423","interactedAt":"2026-03-15T12:00:00Z","outcome":"success"}'
Fetch trust JSON
curl https://agentverus.ai/api/v1/skill/c0d56cb8-d501-433c-8290-9f72018fc423/trust

Category Scores

47
Permissions
75
Injection
21
Dependencies
80
Behavioral
75
Content
80
Code Safety

Findings (18)

highCapability contract mismatch: inferred credential access is not declared-15

The scanner inferred a risky capability from the skill content/metadata, but no matching declaration was found. Add a declaration with a clear justification, or remove the behavior.

Content pattern: Read **.env

Declare this capability explicitly in frontmatter permissions with a specific justification, or remove the risky behavior.

permissionsASST-05
highCapability contract mismatch: inferred command execution is not declared-12

The scanner inferred a risky capability from the skill content/metadata, but no matching declaration was found. Add a declaration with a clear justification, or remove the behavior.

Content pattern: Exec

Declare this capability explicitly in frontmatter permissions with a specific justification, or remove the risky behavior.

permissionsASST-03
highCapability contract mismatch: inferred system modification is not declared-12

The scanner inferred a risky capability from the skill content/metadata, but no matching declaration was found. Add a declaration with a clear justification, or remove the behavior.

Content pattern: sudo

Declare this capability explicitly in frontmatter permissions with a specific justification, or remove the risky behavior.

permissionsASST-03
highCredential access detected-25

Found credential access pattern: "Read **.env"

Read **.env** file to find api keys

Remove references to credentials and secrets. Skills should never access sensitive authentication data.

injectionASST-05
highDownload-and-execute pattern (curl|wget pipe to shell)-20

Piping a downloaded script directly to a shell interpreter. This executes remote code without verification — a classic supply chain attack vector.

curl -LsSf https://astral.sh/uv/install.sh | sh

Review the code block starting at line 58. Ensure this pattern is necessary and does not pose a security risk.

code-safetyASST-04
mediumCapability contract mismatch: inferred file write is not declared-8

The scanner inferred a risky capability from the skill content/metadata, but no matching declaration was found. Add a declaration with a clear justification, or remove the behavior.

Content pattern: write `images/` and `manifest.json` (or `manifest.txt`) under `--output

Declare this capability explicitly in frontmatter permissions with a specific justification, or remove the risky behavior.

permissionsASST-03
mediumCapability contract mismatch: inferred network access is not declared-6

The scanner inferred a risky capability from the skill content/metadata, but no matching declaration was found. Add a declaration with a clear justification, or remove the behavior.

Content pattern: https://www.python.org/downloads/

Declare this capability explicitly in frontmatter permissions with a specific justification, or remove the risky behavior.

permissionsASST-04
mediumDownload-and-execute pattern detected (inside code block)-8

The skill contains a download-and-execute pattern inside a code block. Verify the URL is trustworthy.

curl -LsSf https://astral.sh/uv/install.sh | sh

Pin the installer to a specific version or hash. Consider bundling dependencies instead.

dependenciesASST-04
mediumSystem modification detected (inside code block)-6

Found system modification pattern: "sudo apt install"

- **Linux**: `sudo apt install python3.11` (Ubuntu/Debian) or use your distribution's package manager

Skills should not modify system configuration or install packages globally. Bundle required dependencies.

behavioralASST-03
mediumSystem modification detected (inside code block)-6

Found system modification pattern: "~/.bashrc"

# Set permanently (add to ~/.bashrc or ~/.zshrc)

Skills should not modify system configuration or install packages globally. Bundle required dependencies.

behavioralASST-03
mediumSuspicious install pattern: download and execute from remote URL-8

The skill instructs users to download and execute code from a remote URL, a common supply-chain attack vector.

curl -LsSf https://astral.sh/uv/install.sh | sh

Remove curl-pipe-to-shell patterns. Provide dependencies through safe, verifiable channels.

behavioralASST-02
mediumMany external URLs referenced (9)-8

The skill references 9 external URLs and also discusses auth/API/payment workflows, which increases the chance that sensitive operations depend on many remote endpoints.

URLs: https://www.python.org/downloads/, https://astral.sh/uv/install.ps1, https://astral.sh/uv/install.sh, https://api.openstreetcam.org/`, https://commons.wikimedia.org/w/api.php`...

Minimize external dependencies to reduce supply chain risk.

dependenciesASST-04
mediumUnknown external reference-8

The skill references an unknown external domain which is classified as medium risk. Merged overlapping signals from the repeated finding family: - Unknown external reference

https://api.openstreetcam.org/`

Verify that this external dependency is trustworthy and necessary.

dependenciesASST-04
lowUnknown external reference-5

The skill references an unknown external domain which is classified as low risk.

https://www.python.org/downloads/

Verify that this external dependency is trustworthy and necessary.

dependenciesASST-04
lowUnknown external reference-5

The skill references an unknown external domain which is classified as low risk.

https://astral.sh/uv/install.ps1

Verify that this external dependency is trustworthy and necessary.

dependenciesASST-04
lowUnknown external reference-5

The skill references an unknown external domain which is classified as low risk.

https://astral.sh/uv/install.sh

Verify that this external dependency is trustworthy and necessary.

dependenciesASST-04
lowNo explicit safety boundaries-10

The skill does not include explicit safety boundaries defining what it should NOT do.

No safety boundary patterns found

Add a 'Safety Boundaries' section listing what the skill must NOT do (e.g., no file deletion, no network access beyond needed APIs).

contentASST-09
infoOutput constraints defined

The skill includes output format constraints (length limits, format specifications).

Output constraint patterns detected

Keep these output constraints.

contentASST-09