Security audit
Security checks for vulnerabilities and agentic risk
This garage-door booking skill is coherent, but it can send a user's contact details to Lokuli and create a booking without clear consent or confirmation instructions.
Review before installing. Use it only when you are comfortable sending your name, email, phone number, ZIP code, and booking details to Lokuli, and require the agent to confirm the provider, time slot, and contact fields with you before creating any booking.
The skill exposes a booking flow that collects and transmits personal contact information (name, email, phone) to an external MCP endpoint without any user-facing warning, consent language, or data-handling notice. This is dangerous because users may disclose sensitive personal data without understanding it will be sent to a third-party service, creating privacy, compliance, and trust risks.
The trigger description includes a broad catch-all phrase ('or any garage-door service request'), which can cause the skill to activate on loosely related requests without clear user intent. Over-broad activation increases the chance of unintended tool use, unnecessary data collection, or steering the conversation into booking flows when the user only wanted general information.
No suspicious patterns detected.
