Book Phone Repair

• Outcome: Pass
• Latest audit: May 28, 2026, 7:02 AM
• Version:
  1.0.1

Overview

This is a simple phone-repair booking skill that uses a disclosed Lokuli endpoint and does not include hidden code, but users should confirm before sharing contact details or creating a booking.

Install only if you are comfortable using Lokuli for phone-repair booking. Before creating a booking, confirm the provider, service, time slot, name, email, and phone number, and understand that those contact details will be sent to the external booking service.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (2)

Vague Triggers

Medium

• Confidence: 93% confidence
• Finding: The trigger text is broad enough to activate on generic repair-related user requests without clearly limiting scope to phone repair. This can cause the agent to invoke an external booking workflow in situations the user did not intend, increasing the chance of unintended data sharing or unwanted third-party actions.

Missing User Warnings

High

• Confidence: 97% confidence
• Finding: The skill facilitates sending customer name, email, and phone number to an external MCP booking service but does not warn the user that this personal data will be transmitted off-platform. In a booking context, this omission materially increases privacy and consent risk because users may provide contact details without understanding they are being shared with a third party.

VirusTotal

66/66 vendors flagged this skill as clean.