Caveat verdict
mcp.json
moodtrip-hotel-search
88
🟢 Trusted
No high-risk patterns surfaced by the deep scan — automated capability review, not behavioral proof.
MCP server config spawns local processes
The skill searches and compares hotels, providing booking links. It seems to be for a legitimate travel planning purpose.
Automated static analysis — not a human review. Caveat flags capabilities, not confirmed intent, and can produce false positives. Disagree with this verdict? Use Dispute below.
75
security
80
transparency
50
maintenance
What it does
These are capability combinations: each listed behavior occurs in the skill, but Caveat detects co-occurrence — it does not verify that one flows into another. Read the code to confirm a live chain.
Capability combination high
MCP server config spawns local processes — commands run with user privileges
LLM06 · ASI02 · ASI03
Permissions & capabilities
Requires 1 system binary.
mcp_server_configprocess_exec Thanks — recorded.