Security audit
Security checks for vulnerabilities and agentic risk
This skill is a small, disclosed dog-trainer booking helper, with privacy and trigger-scope caveats but no evidence of hidden or malicious behavior.
Install only if you are comfortable using Lokuli's external service to search and book dog-trainer appointments. Before completing a booking, confirm the provider, time, price if available, and exactly which contact details will be sent.
The trigger text is broad enough to activate on generic dog-trainer-related requests without clearly constraining scope to explicit booking intent. That can cause the skill to engage prematurely, leading users into an external booking workflow and possible data disclosure or unintended actions when they only wanted general information.
The skill includes a booking flow that sends personal information such as name, email, and phone number to an external MCP endpoint, but it does not warn the user or require explicit informed consent at the skill description level. This creates a privacy and trust risk because users may not realize their contact data will be transmitted to a third-party service.
No suspicious patterns detected.
