Book Event Planner

ReviewAudited by ClawScan on May 10, 2026.

Overview

The skill is coherent for finding and booking event planners, but it can create a real third-party booking and send contact details without documenting a required final confirmation step.

Before installing or using this skill, be ready to tell the agent not to finalize any booking until you explicitly approve the selected provider, date/time, price or terms, and the personal contact details being sent to Lokuli.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

ConcernMedium Confidence
ASI02: Tool Misuse and Exploitation
What this means

An agent could potentially schedule an appointment or commit the user to a service before the user has clearly approved the exact provider, time, and terms.

Why it was flagged

The skill can move from broad discovery requests into a booking-capable tool, but the provided instructions do not require a final user approval before creating the booking.

Skill content
"Triggers on requests like \"book a event-planner\", \"find event-planner near me\" ..." and "name": "create_booking"
Recommendation

Require explicit user confirmation before calling create_booking, including provider, service, date/time, price if available, cancellation policy, and the contact information to be submitted.

What this means

Using the booking function may share the user's name, email, and phone number with Lokuli or downstream service providers.

Why it was flagged

The skill discloses an external MCP endpoint and shows that booking requests include personal contact information.

Skill content
"https://lokuli.com/mcp/sse" ... "customerName": "John Doe", "customerEmail": "john@example.com", "customerPhone": "+13105551234"
Recommendation

Only provide contact details after the user agrees to share them, and verify the Lokuli service is trusted for the intended booking.