Security audit

Book Mechanic

Security checks across malware telemetry and agentic risk

Overview

This skill is a straightforward connector for booking mechanic services through Lokuli, with expected sharing of booking contact details.

Install only if you are comfortable using Lokuli as an external booking service. Before booking, review and confirm the mechanic, service, appointment time, name, email, phone number, and any location or zip code that will be sent.

SkillSpector

By NVIDIA

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (2)

Vague Triggers

Medium

Confidence: 92% confidence
Finding: The trigger description is broad enough to activate on generic mechanic-related requests without clear user intent boundaries, which can cause the agent to invoke an external booking workflow unexpectedly. In this skill, unintended activation is more dangerous because it can lead to searching providers and progressing toward bookings that involve transmitting user location and contact data to a third-party MCP endpoint.

Missing User Warnings

Medium

Confidence: 95% confidence
Finding: The skill includes a booking flow that collects and sends personal information such as name, email, and phone number to an external service, but it does not warn the user or require explicit informed consent before transmission. This creates a privacy and data-handling risk, especially because the skill is explicitly designed to pass PII to a remote MCP endpoint as part of the booking operation.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.