Book Driving Lessons

AdvisoryAudited by Static analysis on Apr 30, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

NoteHigh Confidence

ASI02: Tool Misuse and Exploitation

What this means

The agent may be able to submit a driving-lesson booking if given the required details.

Why it was flagged

The skill exposes a tool call that can create a booking. This is aligned with the skill purpose, but it is a real-world action that should be user-confirmed.

Skill content

"name": "create_booking", "arguments": { "providerId": "xxx", "serviceId": "yyy", "timeSlot": "2025-02-10T14:00:00-08:00"

Recommendation

Only allow the agent to create a booking after you have reviewed the provider, service, time slot, and contact details.

NoteHigh Confidence

ASI07: Insecure Inter-Agent Communication

What this means

Your contact information and booking preferences may be transmitted to Lokuli's MCP service.

Why it was flagged

The skill uses a remote MCP endpoint and the booking example includes customer name, email, and phone number. This data sharing is expected for booking, but it is still personal information sent to an external service.

Skill content

https://lokuli.com/mcp/sse ... "customerName": "John Doe", "customerEmail": "john@example.com", "customerPhone": "+13105551234"

Recommendation

Share only the details needed for the booking and verify that you are comfortable with Lokuli handling that information.