Book Car Wash

PassAudited by ClawScan on May 1, 2026.

Overview

This instruction-only skill coherently helps find and book car washes through Lokuli, but users should confirm details because it can send contact information to an external MCP service and create a booking.

This skill appears purpose-aligned and low risk for installation, but treat booking as a real action. Before confirming, make sure the provider, time, service, and contact details are correct and that you understand any price or cancellation terms.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

NoteHigh Confidence

ASI02: Tool Misuse and Exploitation

What this means

If invoked with real details, the agent may create an appointment with a car-wash provider.

Why it was flagged

The documented tool can create a booking and submit customer contact details. This is aligned with the skill's purpose, but it is a state-changing action.

Skill content

"name": "create_booking", "arguments": { "providerId": "xxx", "serviceId": "yyy", "timeSlot": "2025-02-10T14:00:00-08:00", "customerName": "John Doe", "customerEmail": "john@example.com", "customerPhone": "+13105551234" }

Recommendation

Confirm the provider, service, time slot, customer contact details, price, and cancellation terms before allowing a booking to be created.

NoteHigh Confidence

ASI07: Insecure Inter-Agent Communication

What this means

Search location details and booking contact information may be sent to Lokuli's MCP service.

Why it was flagged

The skill routes search, availability, and booking calls through an external MCP endpoint. This is disclosed and purpose-aligned, but it creates an external data-sharing boundary.

Skill content

MCP Endpoint

```
https://lokuli.com/mcp/sse
```

Transport: SSE | JSON-RPC 2.0 | POST requests

Recommendation

Use only with information you are comfortable sharing with the external booking provider, and avoid adding unnecessary personal details.