Book Data Recovery
PassAudited by ClawScan on May 10, 2026.
Overview
This is an instruction-only booking skill that uses a disclosed Lokuli MCP endpoint and may send user contact details to create a data-recovery appointment.
This skill appears coherent and purpose-aligned. Before using it, confirm that you are comfortable sending your name, email, phone number, zip code, and booking details to Lokuli, and make sure the agent asks for confirmation before creating an appointment.
Findings (2)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The agent could place a real appointment request if the user asks it to book, so mistakes in provider, time, or contact details could affect the user.
The skill exposes a tool that can create an external booking using user contact details. This matches the skill purpose, but users should confirm the exact provider, service, time, and contact information before the action is taken.
"name": "create_booking", "arguments": { "providerId": "xxx", "serviceId": "yyy", "timeSlot": "2025-02-10T14:00:00-08:00", "customerName": "John Doe", "customerEmail": "john@example.com", "customerPhone": "+13105551234" }Require clear user confirmation before calling create_booking, including provider, service, time slot, name, email, and phone number.
Search terms, zip code, appointment details, and contact information may be sent to Lokuli's MCP service.
The skill communicates with an external MCP server. This is disclosed and purpose-aligned, but the MCP server is a separate data boundary that may receive search location and booking contact information.
MCP Endpoint ``` https://lokuli.com/mcp/sse ``` Transport: SSE | JSON-RPC 2.0 | POST requests
Only provide the information needed for the booking and review the booking details before submission.