travel-monitor
Fail
Audited by Gen Agent Trust Hub on Jun 17, 2026
Risk Level: HIGHCOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides instructions to load a persistence mechanism via a macOS LaunchAgent (
~/Library/LaunchAgents/com.nexus.travel-monitor.plist). This configuration allows a background daemon to run on a 6-hour schedule, maintaining execution outside of active agent sessions. - [COMMAND_EXECUTION]: The
checkaction executes a Python script located at~/.nexus/scripts/travel/change-monitor.pyusing the Bash tool. This script is stored in a directory (~/.nexus) separate from the skill's installation path, which can be used to execute unverified code. - [COMMAND_EXECUTION]: The skill interacts with and modifies files at specific paths on the host system, such as
~/.claude/plugins/travel/resources/state.json, which is used to store sensitive travel information including PNR codes and booking details.
Recommendations
- AI detected serious security threats
Audit Metadata