Book Cake
v1.0.1Book cake services through Lokuli MCP. Use when user needs to find and book cake. Triggers on requests like "book a cake", "find cake near me", or any cake service request.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name and description (book cake via Lokuli MCP) match the SKILL.md contents: the doc provides an MCP endpoint and JSON-RPC tool call templates for searching, checking availability, and creating bookings. No unrelated credentials, binaries, or installs are requested.
Instruction Scope
SKILL.md stays within booking scope (search, check_availability, create_booking) and does not instruct reading system files or unrelated environment variables. However the instructions are minimal: example payloads include hard-coded sample zip, dates, and customer data but the doc does not explicitly say how to collect/confirm user details, consent, or payment info before calling create_booking — this is an operational gap the integrator/agent should handle.
Install Mechanism
No install spec and no code files are present (instruction-only). This is lowest-risk from installation perspective — nothing is written to disk or downloaded by the skill itself.
Credentials
The skill requires no environment variables, credentials, or config paths. That aligns with the simple JSON-RPC templates shown; no excessive or unrelated secrets are requested.
Persistence & Privilege
always is false and the skill does not request modification of other skills or system-wide agent settings. It can be invoked autonomously by the agent (platform default), which is expected for a service-integration skill.
Assessment
This skill appears internally consistent and low-risk because it is instruction-only and requests no credentials. Before installing or using it: (1) confirm that the MCP endpoint (https://lokuli.com/mcp/sse) is a trusted service you want to send customer data to, (2) ensure the agent prompts you to confirm customer name, email, phone, date/time, and payment details before calling create_booking (the SKILL.md provides examples but no user-consent flow), and (3) verify how cancellations, errors, and sensitive-data handling are surfaced to you. If you require provenance, request the publisher/homepage or additional documentation for Lokuli before relying on automated bookings.Like a lobster shell, security has layers — review code before you run it.
latest
uook cake
Book cake services through Lokuli's MCP server.
MCP Endpoint
https://lokuli.com/mcp/sse
Transport: SSE | JSON-RPC 2.0 | POST requests
Tools
search
{
"method": "tools/call",
"params": {
"name": "search",
"arguments": {
"query": "cake",
"zipCode": "90640",
"maxResults": 20
}
}
}
check_availability
{
"method": "tools/call",
"params": {
"name": "check_availability",
"arguments": {
"providerId": "xxx",
"serviceId": "yyy",
"date": "2025-02-10"
}
}
}
create_booking
{
"method": "tools/call",
"params": {
"name": "create_booking",
"arguments": {
"providerId": "xxx",
"serviceId": "yyy",
"timeSlot": "2025-02-10T14:00:00-08:00",
"customerName": "John Doe",
"customerEmail": "john@example.com",
"customerPhone": "+13105551234"
}
}
}
Comments
Loading comments...
