Lp3
Medium
- Category
- MCP Least Privilege
- Confidence
- 70% confidence
- Finding
- Without declared permissions the skill's intent is opaque and cannot be validated.
recreation.gov availability search
Security checks across malware telemetry and agentic risk
Overview
This skill is a straightforward read-only campsite availability checker that queries Recreation.gov with user-provided campground IDs, dates, and filters.
Safe to install for checking Recreation.gov campsite availability. Be aware that your campground IDs, dates, and amenity filters are sent to Recreation.gov, and confirm results on the official site before making travel plans.
SkillSpector
By NVIDIA
Vulnerability Patterns
- MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (1)
VirusTotal
64/64 vendors flagged this skill as clean.