Book Auto Body

AdvisoryAudited by Static analysis on Apr 30, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

A booking could be made with an auto-body provider if the agent proceeds to the create_booking step.

Why it was flagged

The skill documents a tool that can create a real appointment, which is aligned with the booking purpose but should be treated as an action requiring explicit user confirmation.

Skill content
"name": "create_booking", "arguments": { "providerId": "xxx", "serviceId": "yyy", "timeSlot": "2025-02-10T14:00:00-08:00"
Recommendation

Confirm the provider, service, time slot, contact details, and any cancellation or cost implications before allowing the booking call.

What this means

Your name, email, phone number, ZIP code, and selected appointment details may be shared with Lokuli and/or the service provider to complete the booking.

Why it was flagged

The booking workflow includes sending personal contact information through the external Lokuli MCP service; this is purpose-aligned but privacy-relevant.

Skill content
"customerName": "John Doe", "customerEmail": "john@example.com", "customerPhone": "+13105551234"
Recommendation

Only provide contact details you are comfortable sharing with the booking service, and verify the external service is one you trust.

What this means

You have limited information to verify who maintains the skill or the external MCP service it points to.

Why it was flagged

The artifact provides no source repository or homepage for independent provenance review, although there is also no local code or install package.

Skill content
Source: unknown; Homepage: none
Recommendation

Use this skill only if you trust the listed Lokuli endpoint, and prefer skills with clear publisher and homepage information for sensitive bookings.