Book Blowout
PassAudited by VirusTotal on May 12, 2026.
Overview
Type: OpenClaw Skill Name: book-blowout Version: 1.0.1 The skill bundle defines tools to interact with the `https://lokuli.com/mcp/sse` endpoint for booking blowout services. All defined actions (search, check_availability, create_booking) and their arguments (e.g., customerName, customerEmail, customerPhone) are directly aligned with the stated purpose of booking services. There is no evidence of malicious execution, data exfiltration to unauthorized endpoints, persistence mechanisms, obfuscation, or prompt injection attempts against the agent in SKILL.md.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The agent could place a real appointment before the user has reviewed all details, which may cause inconvenience, cancellation issues, or unwanted sharing of contact information.
The skill documents a remote tool call that can create a booking with user contact details, but the artifact does not define approval, cancellation, price, or final-review requirements before invoking it.
"name": "create_booking", "arguments": { "providerId": "xxx", "serviceId": "yyy", "timeSlot": "2025-02-10T14:00:00-08:00", "customerName": "John Doe"Only allow booking after explicit user confirmation of the provider, service, date/time, price, cancellation policy, and exact contact details to be submitted.
Using the skill may disclose the user's location, preferred appointment time, name, email, and phone number to the remote booking service.
The skill uses a remote MCP endpoint and the booking example includes email and phone fields, so personal contact data may be sent to Lokuli or downstream booking providers.
https://lokuli.com/mcp/sse ... "customerEmail": "john@example.com", "customerPhone": "+13105551234"
Provide only the information needed for the booking and verify that Lokuli is an intended and trusted service before submitting personal details.