Book Pest Control

• Outcome: Pass
• Latest audit: May 28, 2026 at 7:01 AM UTC
• Version:
  1.0.1

Overview

This is a straightforward pest-control booking skill that uses Lokuli and may send contact details when booking, with no evidence of hidden code, persistence, or unrelated data access.

Install only if you want an agent to search and book pest-control services through Lokuli. Before creating a booking, confirm the provider, service, date, time, price or cancellation terms, and that you agree to send your contact information to Lokuli and the service provider.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (2)

Vague Triggers

Medium

• Confidence: 90% confidence
• Finding: The trigger language is broad enough to activate on generic pest-control requests without clearly signaling that the skill will search and potentially book through an external third-party service. This can cause unintended invocation and increase the chance that user data or booking actions are initiated in a context where the user did not explicitly consent to using Lokuli.

Missing User Warnings

Medium

• Confidence: 96% confidence
• Finding: The skill supports create_booking with customer name, email, and phone number, but the description does not warn users that this personal data will be transmitted to an external MCP endpoint. Lack of disclosure undermines informed consent and can lead to privacy and compliance issues if sensitive contact data is shared unexpectedly.

VirusTotal

65/65 vendors flagged this skill as clean.