Book Cake
PassAudited by ClawScan on May 10, 2026.
Overview
The skill is a straightforward instruction-only cake-booking integration, but it uses an external Lokuli MCP service that may create a booking and receive your contact details.
This skill appears coherent for booking cakes and has no install-time code or credential requirements. Use it with care when creating a booking: confirm the vendor, service, time, and contact information before submission, and only share personal details you are comfortable sending to Lokuli and the cake-service provider.
Findings (2)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The agent could help place an actual cake-service booking, which may affect your schedule or create obligations with a vendor.
The documented tool can create a booking with a provider using the user's contact details. This is aligned with the skill's purpose, but it is a real-world action that should be confirmed by the user before submission.
"name": "create_booking", ... "timeSlot": "2025-02-10T14:00:00-08:00", "customerName": "John Doe", "customerEmail": "john@example.com", "customerPhone": "+13105551234"
Before using the booking action, have the agent show the provider, service, date, time, and contact details and ask for explicit confirmation.
Your cake search and booking details, including contact information if booking, may be sent to Lokuli's external service.
The skill directs the agent to communicate with an external MCP endpoint. This is disclosed and purpose-aligned, but the endpoint would receive booking-related information.
MCP Endpoint ``` https://lokuli.com/mcp/sse ``` Transport: SSE | JSON-RPC 2.0 | POST requests
Only provide the contact information needed for the booking and avoid sharing unnecessary personal or sensitive details.