v1.0.1

Book Acupuncture

BenignClawScan verdict for this skill. Analyzed May 1, 2026, 5:23 AM.

Analysis

This is a coherent instruction-only acupuncture booking skill, but users should confirm details because it can send contact information to an external booking MCP and create an appointment.

GuidanceBefore installing or using this skill, be comfortable with using Lokuli’s external MCP service for acupuncture searches and bookings. When booking, confirm the exact provider, service, time, cost or cancellation terms, and the contact details that will be shared.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Abnormal behavior control

Checks for instructions or behavior that redirect the agent, misuse tools, execute unexpected code, cascade across systems, exploit user trust, or continue outside the intended task.

Tool Misuse and Exploitation

SeverityMediumConfidenceHighStatusNote

SKILL.md

"name": "create_booking", "arguments": { "providerId": "xxx", "serviceId": "yyy", "timeSlot": "2025-02-10T14:00:00-08:00"

The skill documents a tool call that can finalize an appointment booking, which is purpose-aligned but creates a real-world reservation.

User impactIf used without careful confirmation, the agent could book the wrong provider, service, or time.

RecommendationConfirm the provider, service, appointment time, price, cancellation policy, and user intent before allowing the booking call.

Sensitive data protection

Checks for exposed credentials, poisoned memory or context, unclear communication boundaries, or sensitive data that could leave the user's control.

Insecure Inter-Agent Communication

SeverityMediumConfidenceHighStatusNote

SKILL.md

https://lokuli.com/mcp/sse ... "customerName": "John Doe", "customerEmail": "john@example.com", "customerPhone": "+13105551234"

The skill uses a remote MCP endpoint and the booking example includes customer contact information that would be sent outside the local agent.

User impactPersonal contact details may be shared with Lokuli or the selected service provider as part of booking.

RecommendationOnly provide the minimum contact information needed for booking, and ensure the user consents before sending it to the external service.