ClawHub
Back to skill

Security audit

Book Nails

Security checks for vulnerabilities and agentic risk

Overview

This skill is a simple nail-service booking connector whose external booking and contact-data use fit its stated purpose, but users should confirm details before sending personal information.

Install this if you want an agent to search nail providers and create bookings through Lokuli. Before creating a booking, verify the provider, service, time slot, and the name, email, and phone number that will be sent to Lokuli.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Vague Triggers

Medium
Confidence
95% confidence
Finding
The skill advertises activation for essentially any nails-related request, which can cause the agent to invoke this external booking workflow in situations where the user may only be asking for general information, advice, or unrelated nail content. Overly broad triggering increases the chance of unintended tool use, unnecessary data flow to a third-party MCP service, and user confusion about when booking-related automation is happening.

Missing User Warnings

Medium
Confidence
93% confidence
Finding
The booking flow collects and transmits personal contact data including name, email, and phone number to an external MCP endpoint, but the skill does not warn the user that this information will leave the current system. Without clear disclosure and consent, users may unknowingly share sensitive personal information with a third party, creating privacy, compliance, and trust risks.

Static analysis

No suspicious patterns detected.