Security audit

Book Transmission

Security checks across malware telemetry and agentic risk

Overview

This is a simple booking skill that uses a named external service and does not include hidden code, but users should confirm before sharing contact details or creating a booking.

Before installing, be comfortable using Lokuli as the external booking provider. Confirm the provider, service, time, contact details, price, and cancellation terms before allowing create_booking to run.

SkillSpector

By NVIDIA

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (2)

Vague Triggers

Medium

Confidence: 91% confidence
Finding: The skill description uses a broad trigger condition such as 'any transmission service request,' which can cause the agent to invoke this skill in contexts that do not clearly imply the user wants to contact an external booking provider. Overbroad invocation increases the chance of unnecessary external data sharing or unintended booking workflow initiation without sufficiently explicit user intent.

Missing User Warnings

Medium

Confidence: 96% confidence
Finding: The skill includes a booking flow that transmits personal contact information such as name, email, and phone number to an external MCP service, but it does not warn the user in advance that their data will be shared. This undermines informed consent and increases privacy risk, especially if the skill is invoked automatically or the user does not realize booking requires third-party transmission of PII.

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.