Book Detailing

PassAudited by ClawScan on May 10, 2026.

Overview

The skill is coherent for booking detailing through Lokuli, but users should notice that it uses an external MCP service and may send contact details to create a booking.

Use this skill only if you trust Lokuli and are comfortable sharing the contact details needed for a booking. Before the agent creates an appointment, confirm the provider, service, date and time, price, and any cancellation terms.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The agent could help create an actual detailing appointment, potentially committing the user to a service interaction.

Why it was flagged

The skill documents a tool that can create a third-party service booking using user contact details. This is aligned with the stated purpose, but it is an action the user should explicitly confirm.

Skill content
"name": "create_booking" ... "timeSlot": "2025-02-10T14:00:00-08:00" ... "customerName": "John Doe"
Recommendation

Confirm the provider, service, time, price, cancellation policy, and contact details with the user before calling the booking tool.

What this means

The user's name, email, phone number, and booking preferences may be sent to Lokuli's MCP service.

Why it was flagged

The skill relies on a remote MCP endpoint and the booking example includes personal contact fields. This is expected for service booking, but it is a sensitive data flow to an external service.

Skill content
MCP Endpoint ... https://lokuli.com/mcp/sse ... "customerEmail": "john@example.com", "customerPhone": "+13105551234"
Recommendation

Only provide the minimum contact information needed and use the skill only if you trust the Lokuli MCP endpoint.

What this means

Users have limited artifact-level provenance information for verifying who maintains the skill or the service integration.

Why it was flagged

The reviewed metadata does not provide a source repository or homepage for independent verification, even though the skill points to an external MCP service.

Skill content
Source: unknown; Homepage: none
Recommendation

Verify the Lokuli service and publisher before relying on the skill for bookings or sharing personal information.