Security audit
Security checks for vulnerabilities and agentic risk
This skill is a narrow GuruWalk tour-search helper with no local code execution, installs, persistence, or credential access, though users should know it sends tour search details to an external MCP server.
Install only if you are comfortable with tour search parameters such as city, date range, and language being sent to the GuruWalk MCP service. When requests are vague, ask the agent to confirm before searching.
The skill advertises broad trigger phrases like 'plans in a city' and general tour-related requests, which can cause the agent to invoke this external integration during ordinary travel conversation where the user did not specifically ask to query GuruWalk. That increases the chance of unnecessary third-party data disclosure and tool use without clear user intent.
The skill instructs the agent to use an external MCP endpoint but does not clearly warn that user-supplied city, dates, and language will be transmitted to a third-party service. This creates a transparency and privacy risk because users may disclose itinerary information without realizing it will leave the primary system.
The defaults section forces en whenever the conversation is not Spanish, even if the user has not requested English tour results. This is a locale/language policy concern because it imposes a language preference without explicit user choice.
No suspicious patterns detected.
