Book Data Recovery

Book data-recovery services through Lokuli MCP. Use when user needs to find and book data-recovery. Triggers on requests like "book a data-recovery", "find data-recovery near me", or any data-recovery service request.

Security Scan

The skill's stated purpose (booking data-recovery) lines up with its instructions, but the SKILL.md leaves important operational and privacy details unspecified (authentication to the external MCP endpoint, handling of customer PII, and where input values come from), so the behavior is ambiguous and could lead to inadvertent data disclosure.

Purpose & Capability

The name/description (book data-recovery via Lokuli MCP) matches the instructions which show search, availability checks, and booking calls. However, the SKILL.md references an external MCP endpoint (https://lokuli.com/mcp/sse) and platform tool calls without explaining authentication or why no credentials are required — this omission reduces confidence in completeness but is not necessarily malicious.

Instruction Scope

Instructions include example create_booking payloads with customerName, customerEmail, and customerPhone and show concrete zip codes/dates. The doc does not instruct the agent to request explicit user consent before transmitting PII to lokuli.com, nor does it say where to source those customer fields. That creates risk of unintentionally sending personal data. The skill also provides a specific external endpoint to contact, but gives no details about authorization or expected responses.

Install Mechanism

Instruction-only skill with no install spec and no code files — nothing is written to disk. This is the lowest-risk install posture.

Credentials

No environment variables, credentials, or config paths are requested, which is consistent with an instruction-only skill. However, the skill expects to contact an external MCP API; in practice that often requires an API key or platform-level auth. The absence of any declared credential requirement is an omission worth clarifying.

Persistence & Privilege

The skill does not request always:true and uses default invocation settings. It does not declare any persistent or cross-skill configuration changes.

What to consider before installing

This skill appears to be what it says (booking data-recovery), but it leaves out important operational and privacy details. Before installing or enabling it, verify: (1) how the agent authenticates to https://lokuli.com/mcp/sse (is an API key or platform token required?), (2) where customer data (name, email, phone) will come from and ensure the skill prompts for explicit user consent before sending PII, (3) what the privacy policy / data retention policy is for lokuli.com, and (4) that the platform 'tools/call' mechanism will not automatically send profile or system data you didn't intend to share. If you cannot confirm those points, treat the skill as risky and avoid enabling it for autonomous use or for scenarios that involve real personal data.

uook data recovery

Book data-recovery services through Lokuli's MCP server.

MCP Endpoint

https://lokuli.com/mcp/sse

Transport: SSE | JSON-RPC 2.0 | POST requests

Tools

search

{
  "method": "tools/call",
  "params": {
    "name": "search",
    "arguments": {
      "query": "data-recovery",
      "zipCode": "90640",
      "maxResults": 20
    }
  }
}

check_availability

{
  "method": "tools/call",
  "params": {
    "name": "check_availability",
    "arguments": {
      "providerId": "xxx",
      "serviceId": "yyy",
      "date": "2025-02-10"
    }
  }
}

create_booking

{
  "method": "tools/call",
  "params": {
    "name": "create_booking",
    "arguments": {
      "providerId": "xxx",
      "serviceId": "yyy",
      "timeSlot": "2025-02-10T14:00:00-08:00",
      "customerName": "John Doe",
      "customerEmail": "[e-mail]",
      "customerPhone": "[phone]"
    }
  }
}