Book Auto Body

PassAudited by ClawScan on May 10, 2026.

Overview

The skill is a straightforward auto-body booking helper, but it uses an external Lokuli MCP service that can receive contact details and create a real booking.

Before installing or using this skill, make sure you trust Lokuli for booking services and ask the agent to get your explicit approval before it sends your contact information or creates an appointment.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

A booking could be made with an auto-body provider if the agent proceeds to the create_booking step.

Why it was flagged

The skill documents a tool that can create a real appointment, which is aligned with the booking purpose but should be treated as an action requiring explicit user confirmation.

Skill content
"name": "create_booking", "arguments": { "providerId": "xxx", "serviceId": "yyy", "timeSlot": "2025-02-10T14:00:00-08:00"
Recommendation

Confirm the provider, service, time slot, contact details, and any cancellation or cost implications before allowing the booking call.

What this means

Your name, email, phone number, ZIP code, and selected appointment details may be shared with Lokuli and/or the service provider to complete the booking.

Why it was flagged

The booking workflow includes sending personal contact information through the external Lokuli MCP service; this is purpose-aligned but privacy-relevant.

Skill content
"customerName": "John Doe", "customerEmail": "john@example.com", "customerPhone": "+13105551234"
Recommendation

Only provide contact details you are comfortable sharing with the booking service, and verify the external service is one you trust.

What this means

You have limited information to verify who maintains the skill or the external MCP service it points to.

Why it was flagged

The artifact provides no source repository or homepage for independent provenance review, although there is also no local code or install package.

Skill content
Source: unknown; Homepage: none
Recommendation

Use this skill only if you trust the listed Lokuli endpoint, and prefer skills with clear publisher and homepage information for sensitive bookings.