Book Fence
ReviewAudited by ClawScan on May 10, 2026.
Overview
The skill matches its stated booking purpose, but it can create real external bookings and send customer contact details through a remote MCP endpoint without clear confirmation, scope, or cancellation guidance.
Review this skill before installing. It appears designed for its stated purpose and has no local code or install steps, but it can create external service bookings and transmit your contact details. Do not let it finalize a booking unless you have explicitly confirmed the provider, service, time, contact information, and any costs or cancellation terms.
Findings (3)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The agent could book a service appointment or send your contact details to the provider workflow before you have clearly confirmed the exact provider, time, and terms.
The skill documents a tool call that can create an external booking using personal contact details, but the instructions do not require final user confirmation, price/provider recap, cancellation handling, or other guardrails before the high-impact action.
"name": "create_booking", "arguments": { "providerId": "xxx", "serviceId": "yyy", "timeSlot": "2025-02-10T14:00:00-08:00", "customerName": "John Doe", "customerEmail": "john@example.com", "customerPhone": "+13105551234" }Use only after explicitly confirming the provider, service, time slot, contact information, and any costs; the skill should add a clear approval step before create_booking.
Your booking search and contact details may be sent to Lokuli's MCP service as part of the booking flow.
The skill routes requests through an external MCP server, and the booking example includes customer name, email, and phone fields sent through that service.
MCP Endpoint ``` https://lokuli.com/mcp/sse ``` Transport: SSE | JSON-RPC 2.0 | POST requests
Only provide the minimum contact information needed, and verify that you are comfortable sharing it with the remote booking service.
You have less information for independently verifying who maintains the skill or the service integration.
The registry metadata does not identify a source repository or homepage for the remote-service integration, limiting provenance review.
Source: unknown Homepage: none
Prefer skills with clear maintainer, source, and service documentation; verify the Lokuli endpoint before relying on it for bookings.