Security audit

Book Computer Repair

Security checks across malware telemetry and agentic risk

Overview

This booking skill appears legitimate, but it can send contact details to Lokuli and create a real repair appointment without documented consent or confirmation safeguards.

Review before installing. Use it only if you are comfortable with Lokuli receiving search and booking details, and instruct the agent to confirm the provider, service, time, cost or fees if available, cancellation terms, and exact contact information before creating any booking.

SkillSpector

By NVIDIA

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (2)

Vague Triggers

Medium

Confidence: 88% confidence
Finding: The trigger description is broad enough to activate on generic computer-repair requests without clearly limiting when the skill should be invoked. In a booking skill that can search providers and create bookings through an external MCP endpoint, overbroad triggering increases the chance of unintended tool use and downstream disclosure or action without sufficiently specific user intent.

Missing User Warnings

Medium

Confidence: 95% confidence
Finding: The skill describes collecting and transmitting customerName, customerEmail, and customerPhone to an external Lokuli MCP service but does not warn the user that personal contact data will leave the system. This creates a privacy and consent risk because users may not understand that invoking the booking flow shares PII with a third-party service.

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.