Shell command execution detected (child_process).
Critical
- Code
- suspicious.dangerous_exec
- Location
- dist/src/providers/tock/trg.js:42
- Evidence
const child = spawn(bin, args, { stdio: ["ignore", "pipe", "pipe"] });
Security audit
Restaurant
Security checks across malware telemetry and agentic risk
Overview
This restaurant-reservation skill has powerful booking and automation features, but they are disclosed, purpose-aligned, and gated by user confirmation or opt-in settings.
Install only if you are comfortable letting an agent help manage real restaurant reservations. Review the opt-in settings for scheduled sniping and live-site automation, since snipes can book later without another prompt and OpenTable/Tock automation may conflict with site terms.
SkillSpector
By NVIDIA
SkillSpector was not run because this plugin release contains no bundled skills.
VirusTotal
60/60 vendors flagged this plugin as clean.
Static analysis
Detected: suspicious.dangerous_exec
Shell command execution detected (child_process).
Critical
- Code
- suspicious.dangerous_exec
- Location
- src/providers/tock/trg.ts:119
- Evidence
const child = spawn(bin, args, { stdio: ["ignore", "pipe", "pipe"] });