Security audit

Book Detailing

Security checks across malware telemetry and agentic risk

Overview

This skill is a straightforward detailing-service booking helper that uses Lokuli’s external booking endpoint and does not show hidden execution or persistence.

Install only if you are comfortable using Lokuli as an external booking service. Before creating a booking, confirm the provider, service, time slot, and that your name, email, and phone number will be sent to the booking provider.

SkillSpector

By NVIDIA

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (2)

Vague Triggers

Medium

Confidence: 89% confidence
Finding: The trigger description is broad enough to activate on generic detailing-related requests without clear constraints, which can cause the skill to run in situations the user did not explicitly intend. In a booking workflow tied to an external MCP service, unintended invocation can lead to unnecessary data collection, external queries, or progression toward a booking action without sufficiently clear user consent.

Missing User Warnings

Medium

Confidence: 95% confidence
Finding: The skill includes a create_booking flow that transmits customer name, email, and phone number to an external service endpoint, but the skill description does not warn that personal contact data will be sent off-platform. This creates a privacy and consent risk because users may provide sensitive contact information without understanding that it will be shared with a third-party booking provider.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.