ClawHub
Back to skill

Security audit

Book Chiropractor

Security checks across malware telemetry and agentic risk

Overview

This skill is a narrow chiropractor booking helper, with the main caution that booking sends contact details to Lokuli's external service.

Install only if you want an agent to help search for or book chiropractor appointments through Lokuli. Before creating a booking, confirm the provider, service, time slot, name, email, and phone number, and understand that those details will be sent to the external booking service.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Vague Triggers

Medium
Confidence
83% confidence
Finding
The trigger language is broad enough to activate on loosely related chiropractor requests, which can cause the skill to engage when the user did not clearly intend to start an external booking workflow. In this context, accidental activation is risky because the skill is tied to a third-party MCP endpoint and can progress toward provider lookup and booking actions involving personal data.

Missing User Warnings

High
Confidence
95% confidence
Finding
The skill includes a create_booking flow that transmits customerName, customerEmail, and customerPhone to an external Lokuli MCP service, but the description does not clearly disclose this data sharing to the user. This creates a meaningful privacy and consent risk, especially in a healthcare-adjacent booking context where users may not expect their personal contact details to be sent off-platform without explicit notice.

VirusTotal

66/66 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.