Book Dog Trainer

ReviewAudited by ClawScan on May 10, 2026.

Overview

The skill matches its dog-trainer booking purpose, but it can place a real booking and send your contact details to an external MCP service without explicit confirmation safeguards in the instructions.

Before installing or using this skill, confirm you trust the Lokuli MCP endpoint and require the agent to ask for explicit approval before it creates any booking or sends your contact details.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Medium

#ASI02: Tool Misuse and Exploitation

What this means

The agent could schedule a real service appointment, potentially creating obligations or sharing contact details, if it proceeds without a clear user confirmation step.

Why it was flagged

The skill can call an external tool to create a booking using the user's contact details, but the instructions do not define a required final confirmation or other bounds before taking that action.

Skill content

"name": "create_booking", "arguments": { "providerId": "xxx", "serviceId": "yyy", "timeSlot": "2025-02-10T14:00:00-08:00", "customerName": "John Doe", "customerEmail": "john@example.com", "customerPhone": "+13105551234" }

Recommendation

Only allow booking after the agent has shown the provider, service, time, price or terms if available, and contact details, and you have explicitly confirmed.

Low

#ASI07: Insecure Inter-Agent Communication

What this means

Your contact information may be sent to Lokuli's MCP service to search or create the booking.

Why it was flagged

The artifact discloses an external MCP endpoint and shows customer name, email, and phone being sent for booking.

Skill content

MCP Endpoint

```
https://lokuli.com/mcp/sse
```

... "customerName": "John Doe", "customerEmail": "john@example.com", "customerPhone": "+13105551234"

Recommendation

Use only information you are comfortable sharing with the booking provider and confirm the destination service before submitting.

Low

#ASI04: Agentic Supply Chain Vulnerabilities

What this means

It is harder to independently verify who maintains the skill or the external service integration.

Why it was flagged

The registry metadata does not provide a source repository or homepage for verifying the skill or the referenced booking integration.

Skill content

Source: unknown
Homepage: none

Recommendation

Verify the Lokuli service and endpoint independently before relying on it for bookings involving personal information.