Book Catering
ReviewAudited by ClawScan on May 10, 2026.
Overview
The skill is purpose-aligned for catering, but it can create real-world bookings and send customer contact details to an external MCP endpoint without clear confirmation or cancellation guidance.
This skill appears to do what it says—find and book catering through Lokuli—but treat the final booking call as a real commitment. Before installing or using it, make sure the agent will ask you to confirm the provider, date, time, price, contact details, and cancellation terms before submitting any booking.
Findings (3)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
An agent could potentially submit a real catering reservation or share contact information before the user has reviewed all booking details.
This documents a tool call that can create a catering booking using personal contact details. The artifact does not include guidance to require final user confirmation, pricing review, or cancellation/reversal checks before making the booking.
"name": "create_booking", "arguments": { "providerId": "xxx", "serviceId": "yyy", "timeSlot": "2025-02-10T14:00:00-08:00", "customerName": "John Doe", "customerEmail": "john@example.com", "customerPhone": "+13105551234" }Only allow the booking step after the user confirms the exact provider, service, date, time, cost, contact details, and cancellation terms.
Your name, email, phone number, and booking details may be sent to Lokuli and possibly the selected catering provider.
The skill sends booking requests and customer contact fields to an external MCP provider. This is expected for booking catering, but users should understand the data flow.
MCP Endpoint: https://lokuli.com/mcp/sse ... "customerName": "John Doe", "customerEmail": "john@example.com", "customerPhone": "+13105551234"
Share only the contact details needed for the booking and review the provider's privacy and booking terms if available.
It may be harder to verify who maintains the skill or how the external booking service handles requests.
The registry metadata does not provide a source repository or homepage, which limits independent verification of the remote MCP service and skill provenance.
Source: unknown; Homepage: none
Verify that lokuli.com is the intended service before using the skill for real bookings.