Book DJ
PassAudited by VirusTotal on May 12, 2026.
Overview
Type: OpenClaw Skill Name: book-dj Version: 1.0.1 The skill bundle defines a 'book-dj' service that interacts with an external endpoint 'https://lokuli.com/mcp/sse' to search for, check availability of, and create bookings for DJ services. All defined tools and their arguments (e.g., customer name, email, phone for booking) are directly aligned with the stated purpose of booking DJ services. There is no evidence of prompt injection attempts, unauthorized data access, malicious execution, or data exfiltration beyond the scope of the skill's intended functionality in SKILL.md.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The agent could place a booking with selected provider, service, time, and customer details if the user proceeds.
The skill documents a tool that can create an actual booking. This is expected for a booking skill, but it is a mutating action users should explicitly confirm.
"name": "create_booking", "arguments": { "providerId": "xxx", "serviceId": "yyy", "timeSlot": "2025-02-10T14:00:00-08:00", "customerName": "John Doe"Confirm provider, service, date, time, price, and cancellation terms before allowing the agent to call create_booking.
Your name, email address, and phone number may be transmitted to Lokuli's MCP service when creating a booking.
The skill uses an external MCP endpoint and the booking example includes customer contact details. This is purpose-aligned, but it means personal data may be sent to the MCP service.
https://lokuli.com/mcp/sse ... "customerEmail": "john@example.com", "customerPhone": "+13105551234"
Only use the booking step if you trust the service and are comfortable sharing the required contact details.
Users have limited provenance information for verifying who maintains the skill or the associated service endpoint.
The registry metadata does not provide a source repository or homepage for verification. There is no code to install, but the skill relies on an external service.
Source: unknown; Homepage: none
Verify that Lokuli is the service you intend to use before sharing booking details.