Book Driving Lessons
PassAudited by VirusTotal on May 12, 2026.
Overview
Type: OpenClaw Skill Name: book-driving-lessons Version: 1.0.1 The skill bundle is designed to book driving lessons through the Lokuli MCP server. It defines tools for searching, checking availability, and creating bookings, which inherently involve handling customer PII (name, email, phone) and sending it to the specified external endpoint (https://lokuli.com/mcp/sse). There is no evidence of unauthorized data exfiltration, malicious execution, persistence mechanisms, or prompt injection attempts against the agent. The behavior is clearly aligned with its stated purpose, and the handling of PII is a necessary function for a booking skill.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The agent may be able to submit a driving-lesson booking if given the required details.
The skill exposes a tool call that can create a booking. This is aligned with the skill purpose, but it is a real-world action that should be user-confirmed.
"name": "create_booking", "arguments": { "providerId": "xxx", "serviceId": "yyy", "timeSlot": "2025-02-10T14:00:00-08:00"Only allow the agent to create a booking after you have reviewed the provider, service, time slot, and contact details.
Your contact information and booking preferences may be transmitted to Lokuli's MCP service.
The skill uses a remote MCP endpoint and the booking example includes customer name, email, and phone number. This data sharing is expected for booking, but it is still personal information sent to an external service.
https://lokuli.com/mcp/sse ... "customerName": "John Doe", "customerEmail": "john@example.com", "customerPhone": "+13105551234"
Share only the details needed for the booking and verify that you are comfortable with Lokuli handling that information.