Book Alignment

• Analyzed: May 12, 2026, 3:30 AM
• Findings: 1
• Version: 1.0.1
• Hash: f3f5f92e7c1d0bd91caa9d83018b7e1979e1e56e94fa553212193022ef5e33cb
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill is classified as suspicious due to its inherent privacy risks. It instructs the AI agent to make external network calls to `https://lokuli.com/mcp/sse` and to collect and transmit personally identifiable information (PII) such as `customerName`, `customerEmail`, and `customerPhone` via the `create_booking` tool, as defined in `SKILL.md`. While these actions are aligned with the stated purpose of booking alignment services, the handling and transmission of sensitive user data to an external third-party service, without further context on data security or user consent mechanisms, constitutes a meaningful high-risk behavior that is not explicitly malicious but also not entirely benign.