Book Cleaning

ReviewAudited by ClawScan on May 10, 2026.

Overview

The skill is purpose-aligned for booking cleaning services, but it can create a real booking and send customer contact details to a remote MCP service without explicit confirmation guidance.

Before installing, be aware that this skill can send your contact details to Lokuli and create an actual cleaning-service booking. Use it only if you are comfortable with that provider, and make sure the agent asks you to confirm the provider, date, time, contact details, and any costs before finalizing a booking.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

ConcernMedium Confidence
ASI02: Tool Misuse and Exploitation
What this means

The agent could book the wrong provider, date, or contact details if it acts before the user has reviewed and confirmed the final booking.

Why it was flagged

This tool can create a real-world service booking using the user's contact details, but the artifact does not provide safety instructions requiring explicit user confirmation before the booking is made.

Skill content
"name": "create_booking", "arguments": { "providerId": "xxx", "serviceId": "yyy", "timeSlot": "2025-02-10T14:00:00-08:00", "customerName": "John Doe", "customerEmail": "john@example.com", "customerPhone": "+13105551234" }
Recommendation

Require explicit user confirmation immediately before calling create_booking, including provider, service, time, contact information, total cost if available, and cancellation terms.

What this means

Customer name, email, phone number, and booking preferences may be transmitted to Lokuli's MCP service.

Why it was flagged

The skill uses a remote MCP endpoint for its operations; this is disclosed and purpose-aligned, but users should understand that booking data is sent to that external service.

Skill content
https://lokuli.com/mcp/sse ... Transport: SSE | JSON-RPC 2.0 | POST requests
Recommendation

Only provide contact information that is necessary for the booking, and verify that the user consents to sending it to the external service.