ClawHub
Back to skill

Security audit

Book Roofing

Security checks for vulnerabilities and agentic risk

Overview

This skill is a small, disclosed roofing-booking integration, but users should understand it uses Lokuli's external MCP service and may send contact details when making a booking.

Before installing, confirm you are comfortable using Lokuli as the booking provider and only provide contact details when you intentionally want to create a roofing-service booking. The skill should ideally ask before sending personal information or finalizing any appointment.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Vague Triggers

Medium
Confidence
93% confidence
Finding
The trigger text is broad enough to activate on generic roofing-related requests, which can cause the skill to be invoked when the user did not clearly ask to search or book through this external service. In a transactional skill that can lead to search and booking flows, overbroad activation increases the risk of unintended tool use and unnecessary sharing of user context with a third-party MCP endpoint.

Missing User Warnings

Medium
Confidence
97% confidence
Finding
The skill supports creating bookings using personal data such as customer name, email, and phone number, but it does not warn that this information will be sent to an external MCP service at lokuli.com. This creates a privacy and consent risk because users may disclose sensitive contact details without understanding the third-party data transfer or the purpose and scope of processing.

Static analysis

No suspicious patterns detected.