ClawHub
Back to skill

Security audit

Lokuli Booking

Security checks across malware telemetry and agentic risk

Overview

This appears to be a purpose-aligned local services booking skill, but users should know it may share contact details with Lokuli and route them to Stripe checkout.

Install only if you are comfortable using Lokuli for local service booking. Before proceeding, confirm the exact provider, service, appointment time, price, cancellation terms, and what contact details will be shared; do not treat a generated checkout URL or cart as final approval to pay.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Vague Triggers

Medium
Confidence
89% confidence
Finding
The trigger description is broad enough to activate on many generic local-service requests, which can cause the agent to route users into this skill when they may only be asking for information or recommendations. In a booking skill that can collect personal data and initiate transactions, unintended invocation increases the risk of unnecessary data collection, premature workflow progression, and user confusion.

Missing User Warnings

Medium
Confidence
93% confidence
Finding
The skill instructs collection of name, email, and phone number and transmission to an external MCP service, but it does not warn the user that personal data will be shared with a third party. In a real-world booking context, this creates a privacy and consent gap that can lead to unintended disclosure of personally identifiable information.

VirusTotal

66/66 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.