Trust Assessment
book-art-lessons received a trust score of 94/100, placing it in the Trusted category. This skill has passed all critical security checks and demonstrates strong security practices.
SkillShield's automated analysis identified 1 finding: 0 critical, 0 high, 1 medium, and 0 low severity. Key findings include Skill defines tool that handles Personally Identifiable Information (PII).
The analysis covered 4 layers: Manifest Analysis, Static Code Analysis, Dependency Graph, LLM Behavioral Safety. All layers scored 70 or above, reflecting consistent security practices.
Last analyzed on February 13, 2026 (commit 13146e6a). SkillShield performs automated 4-layer security analysis on AI skills and MCP servers.
Layer Breakdown
Behavioral Risk Signals
Security Findings1
| Severity | Finding | Layer | Location | |
|---|---|---|---|---|
| MEDIUM | Skill defines tool that handles Personally Identifiable Information (PII) The `create_booking` tool is designed to collect and transmit sensitive Personally Identifiable Information (PII), specifically `customerName`, `customerEmail`, and `customerPhone`, to an external service (`https://lokuli.com/mcp/sse`). While these fields are necessary for the skill's intended booking functionality, their presence indicates a capability to handle and transfer sensitive user data. This poses a risk of data exfiltration or privacy violation if the LLM is not properly constrained, if user consent is not explicitly obtained, or if the external service's data handling practices are not secure. Implement strict data handling policies for the LLM, ensuring explicit user consent is obtained before collecting and transmitting PII. Validate and sanitize all user-provided inputs for these fields. Conduct due diligence on the external service (`lokuli.com`) to ensure it adheres to data privacy regulations and best practices. Consider anonymization or pseudonymization where possible to minimize PII exposure. | LLM | SKILL.md:49 |
Scan History
Embed Code
[](https://skillshield.io/report/7f60698d7167c60c)
Powered by SkillShield