lilo-property-vacation-rentals

Security Findings (105)

• HighAS-002

  ⚠️Excessive Permissions ×16

  tool declares network permission

  search_propertiessearch_market_discoverynatural_language_searchget_host_reputationget_network_statsgenerate_google_vr_feedsearch_by_amenity_naturalquery_evidence_chaingenerate_tax_documentationreport_inventory_issueverify_checkout_conditionsearch_philadelphia_historicsearch_philadelphia_venues

  tool declares exec permission

  check_guest_risk_scorereport_inventory_issuecreate_maintenance_task

  Fix: Tool requests broad permissions (exec/fs/network). Validate input parameters using Enums where possible, and restrict file system operations to explicit allowed directories.

• MediumAS-002

  ⚠️Excessive Permissions ×8

  tool declares fs permission

  create_bookinganalyze_threat_riskcheck_guest_risk_scorepredict_chargeback_riskcreate_maintenance_taskanalyze_interaction_risk

  tool declares db permission

  query_evidence_chain

  tool declares env permission

  verify_trust_chain

  Fix: Tool requests broad permissions (exec/fs/network). Validate input parameters using Enums where possible, and restrict file system operations to explicit allowed directories.

• LowAS-011

  ℹ️Missing Rate-Limit / Timeout ×16

  tool performs network or execution operations but declares no rate-limit, timeout, or retry configuration

  search_propertiessearch_market_discoverynatural_language_searchget_host_reputationget_local_recommendationsget_network_statsgenerate_google_vr_feedsearch_by_amenity_naturalquery_evidence_chaincheck_guest_risk_scoregenerate_tax_documentationreport_inventory_issuecreate_maintenance_taskverify_checkout_conditionsearch_philadelphia_historicsearch_philadelphia_venues

  Fix: Declare explicit rate-limit, timeout, and retry configuration for all network and execution tools. Implement exponential back-off and surface resource state to the calling agent.

• LowAS-002

  ⚠️Excessive Permissions

  get_local_recommendations:tool declares http permission

  Fix: Tool requests broad permissions (exec/fs/network). Validate input parameters using Enums where possible, and restrict file system operations to explicit allowed directories.

• InfoAS-014

  ℹ️Dependency Inventory Unavailable ×64

  Tool did not expose metadata.dependencies or repo_url, so supply-chain coverage is limited.

  get_propertysearch_propertiessearch_market_discoverynatural_language_searchfind_similar_propertiesget_property_reputationget_property_manifestget_property_ai_manifestget_host_reputationverify_evidencecheck_protection_statusget_house_rulesget_property_faqsget_local_recommendationsask_property_questionget_network_statsget_founding_members_statusverify_guest_identitycreate_bookingcheck_availabilitygenerate_google_vr_feedsearch_by_amenity_naturalcompare_propertiesget_neighborhood_intelquery_evidence_chainverify_evidence_anchorget_dispute_evidence_bundleget_chargeback_defense_packetrecord_interactionget_evidence_timelineanalyze_threat_riskcheck_guest_risk_scoredetect_threat_patterndetect_risk_patternget_squatter_riskflag_suspicious_bookingpredict_chargeback_riskget_pricing_intelligenceget_demand_forecastget_jurisdiction_rulescheck_permit_requirementsgenerate_tax_documentationcheck_world_cup_complianceget_insurance_requirementsget_property_inventoryreport_inventory_issueget_maintenance_schedulecreate_maintenance_taskget_cleaning_scheduleassign_cleanerverify_checkout_conditionsearch_philadelphia_historicget_philadelphia_landmarksearch_philadelphia_venuesget_philadelphia_worldcup_infoget_philadelphia_250th_eventsingest_philadelphia_dataget_trust_certificateverify_trust_chainanalyze_interaction_riskanalyze_communicationget_dispute_defense_packetassess_booking_riskget_onboarding_status

  Fix: Review and remediate the identified issue.