Book Acupuncture

ReviewAudited by ClawScan on May 1, 2026.

Overview

This is a coherent instruction-only acupuncture booking skill, but users should confirm details because it can send contact information to an external booking MCP and create an appointment.

Before installing or using this skill, be comfortable with using Lokuli’s external MCP service for acupuncture searches and bookings. When booking, confirm the exact provider, service, time, cost or cancellation terms, and the contact details that will be shared.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Medium

#ASI02: Tool Misuse and Exploitation

What this means

If used without careful confirmation, the agent could book the wrong provider, service, or time.

Why it was flagged

The skill documents a tool call that can finalize an appointment booking, which is purpose-aligned but creates a real-world reservation.

Skill content

"name": "create_booking", "arguments": { "providerId": "xxx", "serviceId": "yyy", "timeSlot": "2025-02-10T14:00:00-08:00"

Recommendation

Confirm the provider, service, appointment time, price, cancellation policy, and user intent before allowing the booking call.

Medium

#ASI07: Insecure Inter-Agent Communication

What this means

Personal contact details may be shared with Lokuli or the selected service provider as part of booking.

Why it was flagged

The skill uses a remote MCP endpoint and the booking example includes customer contact information that would be sent outside the local agent.

Skill content

https://lokuli.com/mcp/sse ... "customerName": "John Doe", "customerEmail": "john@example.com", "customerPhone": "+13105551234"

Recommendation

Only provide the minimum contact information needed for booking, and ensure the user consents before sending it to the external service.