Book Bartender

PassAudited by ClawScan on May 1, 2026.

Overview

This is a coherent booking skill, but it can send your contact details to a third-party MCP service to create a bartender booking.

This skill appears purpose-aligned and has no local code or install-time behavior. Before using it, make sure the agent shows you the selected bartender, service, time slot, and contact details, and only then approve creating the booking through Lokuli.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Low

#ASI02: Tool Misuse and Exploitation

What this means

The agent could finalize a bartender booking if the user provides or approves the required details.

Why it was flagged

The skill documents a tool that can create a real service booking using customer contact information. This is aligned with the skill’s booking purpose, but it is a user-impacting action that should be confirmed before use.

Skill content

"name": "create_booking", "arguments": { "providerId": "xxx", "serviceId": "yyy", "timeSlot": "2025-02-10T14:00:00-08:00", "customerName": "John Doe", "customerEmail": "john@example.com", "customerPhone": "+13105551234" }

Recommendation

Confirm the provider, service, time slot, and contact information before allowing the booking call.

Low

#ASI07: Insecure Inter-Agent Communication

What this means

Booking requests, including contact details when creating a booking, may be sent to Lokuli’s MCP service.

Why it was flagged

The skill routes search, availability, and booking requests through an external MCP endpoint. That external data boundary is disclosed and purpose-aligned.

Skill content

MCP Endpoint: https://lokuli.com/mcp/sse ... Transport: SSE | JSON-RPC 2.0 | POST requests

Recommendation

Only share contact details you are comfortable sending to the booking provider, and review the final booking request before submission.

Info

#ASI04: Agentic Supply Chain Vulnerabilities

What this means

Users have limited registry-provided information for independently verifying the skill publisher or its relationship to the Lokuli service.

Why it was flagged

The registry information does not provide a source repository or homepage for verifying publisher provenance, although no executable code or install script is included.

Skill content

Source: unknown; Homepage: none

Recommendation

If provenance matters for your use case, verify the Lokuli endpoint and publisher trust before installing.