Book Braids
PassAudited by VirusTotal on May 12, 2026.
Overview
Type: OpenClaw Skill Name: book-braids Version: 1.0.1 The skill bundle defines a service to book braids through the `lokuli.com` MCP server. It includes tools for searching, checking availability, and creating bookings, which involve handling customer PII (name, email, phone) as expected for a booking service. There is no evidence of malicious intent, such as unauthorized data exfiltration, remote code execution, persistence mechanisms, or prompt injection attempts to subvert the agent's core function or access unrelated sensitive data. The external network calls are to the explicitly stated service provider, `https://lokuli.com/mcp/sse`, which is consistent with the skill's purpose.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
If used without careful confirmation, the agent could create an appointment with the wrong provider, service, time, or contact details.
The skill exposes a state-changing booking action. This is purpose-aligned, but a booking should be treated as a final user-approved action.
"name": "create_booking", "arguments": { "providerId": "xxx", "serviceId": "yyy", "timeSlot": "2025-02-10T14:00:00-08:00"Confirm the provider, service, time slot, and contact details with the user immediately before calling create_booking.
Your name, email address, phone number, and appointment details may be shared with Lokuli's MCP service when creating a booking.
The skill sends personal contact information to a remote MCP endpoint as part of booking.
"https://lokuli.com/mcp/sse" ... "customerName": "John Doe", "customerEmail": "john@example.com", "customerPhone": "+13105551234"
Only provide contact information you are comfortable sharing with Lokuli, and use the booking action only after confirming you trust the service.