Security audit

Book Painter

Security checks across malware telemetry and agentic risk

Overview

The skill appears to do what it says: help users search for painters and create bookings through an external booking service, though users should understand that booking sends their contact details to Lokuli.

Install only if you are comfortable with the skill contacting Lokuli to search providers and make bookings. Before confirming a booking, check the details and expect your name, email, and phone number to be sent to that external service.

SkillSpector

By NVIDIA

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (2)

Vague Triggers

Medium

Confidence: 93% confidence
Finding: The trigger language is broad enough to activate on almost any painter-related request without clear constraints or confirmation gates. In a skill that can search providers and initiate bookings, ambiguous activation increases the chance the agent will invoke an external service prematurely or in the wrong user context.

Missing User Warnings

High

Confidence: 98% confidence
Finding: The skill handles customerName, customerEmail, and customerPhone in a booking call to a third-party MCP endpoint, but the skill text does not disclose that this personal data will be transmitted externally. This creates a privacy and consent risk: users may provide sensitive contact information without understanding where it is sent, and the agent may transfer PII to an external service without adequate notice or minimization.

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.