Trust Assessment
book-eyebrows received a trust score of 86/100, placing it in the Mostly Trusted category. This skill has passed most security checks with only minor considerations noted.
SkillShield's automated analysis identified 1 finding: 0 critical, 1 high, 0 medium, and 0 low severity. Key findings include Skill designed to transmit Personally Identifiable Information (PII) to external service.
The analysis covered 4 layers: Manifest Analysis, Static Code Analysis, Dependency Graph, LLM Behavioral Safety. All layers scored 70 or above, reflecting consistent security practices.
Last analyzed on February 12, 2026 (commit 13146e6a). SkillShield performs automated 4-layer security analysis on AI skills and MCP servers.
Layer Breakdown
Behavioral Risk Signals
Security Findings1
| Severity | Finding | Layer | Location | |
|---|---|---|---|---|
| HIGH | Skill designed to transmit Personally Identifiable Information (PII) to external service The `create_booking` tool, as defined in the skill, explicitly includes arguments for `customerName`, `customerEmail`, and `customerPhone`. This indicates the skill's intention to collect and transmit sensitive Personally Identifiable Information (PII) to an external endpoint (`https://lokuli.com/mcp/sse`). While this may be the intended functionality for a booking service, it represents a significant data exfiltration risk if the external service is compromised, malicious, or does not adhere to robust data privacy and security standards. The normal operation of this skill would involve sending user PII to a third-party server. Implement robust data handling policies and ensure the external endpoint (`lokuli.com`) is thoroughly vetted for security and privacy compliance. Obtain explicit user consent before collecting and transmitting PII. Provide clear privacy notices to users detailing how their data will be used and shared. Consider data minimization techniques and encryption for sensitive data in transit and at rest. | LLM | SKILL.md:30 |
Scan History
Embed Code
[](https://skillshield.io/report/0ca1d1a8a06c4f08)
Powered by SkillShield