Book Landscaper

• Outcome: Pass
• Latest audit: May 28, 2026 at 7:01 AM UTC
• Version:
  1.0.1

Overview

The skill appears to do what it says: search landscapers, check availability, and create bookings through a disclosed external service.

Before installing, treat searches and booking actions as interactions with Lokuli's external service. Only provide contact details when you intend to book, and confirm booking details before allowing create_booking to run.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (2)

Vague Triggers

Medium

• Confidence: 91% confidence
• Finding: The trigger description is broad enough that the skill may activate for vague or general landscaping-related requests, increasing the chance of unintended tool use or premature routing into a booking flow. In this context, mistaken invocation matters because the skill is connected to an external MCP endpoint that can search providers and potentially progress toward booking actions involving user data.

Missing User Warnings

Medium

• Confidence: 96% confidence
• Finding: The skill documents collection and transmission of customer name, email, and phone number to an external MCP service but does not warn the user or require explicit consent before sending that data. This creates a privacy and data-handling risk because users may not realize their personal contact information will be shared with a third party during booking.

VirusTotal

65/65 vendors flagged this skill as clean.