Book Carpet Cleaning
PassAudited by VirusTotal on May 12, 2026.
Overview
Type: OpenClaw Skill Name: book-carpet-cleaning Version: 1.0.1 The skill is classified as suspicious due to its collection and transmission of Personally Identifiable Information (PII), specifically customer name, email, and phone number, via the `create_booking` tool to an external endpoint `https://lokuli.com/mcp/sse` as described in `SKILL.md`. While this data collection is necessary for the stated purpose of booking a service, it represents a significant data privacy risk and constitutes a high-risk capability without clear malicious intent, thus falling under the 'suspicious' threshold.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The agent could book an appointment with a service provider if the user proceeds with this skill.
The skill documents a tool call that can create an external service booking, which is expected for the stated purpose but should be performed only after the user confirms the booking details.
"name": "create_booking", "arguments": { "providerId": "xxx", "serviceId": "yyy", "timeSlot": "2025-02-10T14:00:00-08:00"Confirm the provider, service, time slot, and any costs or cancellation terms before allowing the booking call.
Your name, email, phone number, and booking request details may be transmitted to Lokuli and/or a service provider.
The skill uses a disclosed external MCP endpoint and includes customer contact details in the booking request, meaning personal information is sent outside the local agent environment.
https://lokuli.com/mcp/sse ... "customerName": "John Doe", "customerEmail": "john@example.com", "customerPhone": "+13105551234"
Use the skill only if you are comfortable sharing the needed contact information with the external booking service.