Book Fitness

Book fitness services through Lokuli MCP. Use when user needs to find and book fitness. Triggers on requests like "book a fitness", "find fitness near me", or any fitness service request.

Security Scan

The skill's requests and runtime instructions are coherent with its stated purpose (finding and booking fitness services) and it does not ask for extra credentials or install artifacts, but it will send user booking data to an external Lokuli endpoint so you should confirm privacy/trust before use.

Purpose & Capability

Name/description (book fitness via Lokuli MCP) matches the SKILL.md: it describes an MCP endpoint and JSON-RPC tool calls for search, check_availability, and create_booking. Nothing requested (no env vars, no binaries) is unrelated to the stated purpose.

Instruction Scope

SKILL.md limits runtime activity to calling Lokuli's MCP endpoint (https://lokuli.com/mcp/sse) using JSON-RPC/SSE and provides example tool calls. This is within scope, but the create_booking examples include personal data fields (customerName, customerEmail, customerPhone) and location (zipCode). The agent will send PII to an external service when used — confirm what user data will be transmitted and how it's protected/retained.

Install Mechanism

Instruction-only skill with no install spec and no code files — lowest install risk. No downloads, packages, or extracted archives are present.

Credentials

The skill declares no required environment variables, credentials, or config paths. That matches the simple JSON-RPC usage described in SKILL.md.

Persistence & Privilege

always is false and there's no installation step that would persist credentials or modify other skills. The skill can be invoked by the agent normally but does not request elevated or persistent privileges.

Assessment

This skill appears to do what it says: call Lokuli's MCP to search and create fitness bookings. Before installing/using it, verify you trust the external domain (lokuli.com) and confirm their privacy/retention policy because booking will transmit user PII (name, email, phone, location, appointment times). Ask the skill author (or your admin) how user data is protected, whether bookings are audited, and whether any additional data beyond what's needed will be sent. Because the skill's source is unknown, consider testing with mock data first and only enable for real bookings after you are satisfied with Lokuli's trustworthiness.

uook fitness

Book fitness services through Lokuli's MCP server.

MCP Endpoint

https://lokuli.com/mcp/sse

Transport: SSE | JSON-RPC 2.0 | POST requests

Tools

search

{
  "method": "tools/call",
  "params": {
    "name": "search",
    "arguments": {
      "query": "fitness",
      "zipCode": "90640",
      "maxResults": 20
    }
  }
}

check_availability

{
  "method": "tools/call",
  "params": {
    "name": "check_availability",
    "arguments": {
      "providerId": "xxx",
      "serviceId": "yyy",
      "date": "2025-02-10"
    }
  }
}

create_booking

{
  "method": "tools/call",
  "params": {
    "name": "create_booking",
    "arguments": {
      "providerId": "xxx",
      "serviceId": "yyy",
      "timeSlot": "2025-02-10T14:00:00-08:00",
      "customerName": "John Doe",
      "customerEmail": "[e-mail]",
      "customerPhone": "[phone]"
    }
  }
}