Security audit
Security checks for vulnerabilities and agentic risk
This catering-booking skill is purpose-aligned but needs review because it can send customer contact details to an external booking service and lacks clear confirmation boundaries.
Review this skill before installing. It appears to do what it claims, but users should confirm that they want Lokuli to receive their contact details and should explicitly approve any booking before it is created.
The skill instructs use of an external MCP endpoint for search and booking and includes example transmission of customer name, email, and phone number, but provides no user-facing warning or consent step. This creates a real risk of sending personal contact data to a third-party service or creating bookings without the user clearly understanding that external processing will occur.
The trigger description is broad enough to activate on vague catering-related requests without clearly constraining when the skill should engage. In a booking skill that can initiate external searches and eventual reservations, overbroad activation increases the chance of unintended tool use, mistaken booking workflows, or premature collection/transmission of user data.
No suspicious patterns detected.
