Security audit
Security checks for vulnerabilities and agentic risk
This skill is a straightforward dog-walker search and booking integration, but users should confirm details before sharing contact information or creating a booking.
Install only if you are comfortable using Lokuli's external MCP service for dog-walker searches and bookings. Before creating a booking, make sure the agent shows you the provider, service, time slot, and contact details, and asks for confirmation before sending your name, email, or phone number.
The trigger description is broad enough to activate on generic requests like finding or booking a dog-walker without clearly constraining consent, scope, or transactional readiness. This can cause the skill to engage in contexts where the user only wants information, increasing the chance of unintended third-party actions or premature collection/transmission of user data.
The skill includes a booking flow that transmits personal contact information to an external MCP service, but it provides no user-facing warning or consent step before collecting and sending that data. In a transactional context, this creates privacy and compliance risk because users may not realize their name, email, and phone number will be shared with a third party.
No suspicious patterns detected.
