Book Fitness
PassAudited by ClawScan on May 1, 2026.
Overview
This instruction-only skill matches its stated fitness-booking purpose, but it uses an external Lokuli MCP endpoint that can create bookings and receive customer contact details.
Before installing, decide whether you trust the Lokuli MCP endpoint and publisher. If used, have the agent search and check availability freely, but require explicit confirmation before creating any booking or sharing your contact details.
Findings (3)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The agent could place a fitness booking through the external service when the user intends to book.
The skill exposes a booking-creation action, which is purpose-aligned but can create a real appointment if submitted.
"name": "create_booking", "arguments": { "providerId": "xxx", "serviceId": "yyy", "timeSlot": "2025-02-10T14:00:00-08:00"Confirm the provider, service, date, time, customer details, and any cancellation or fee terms before allowing create_booking to be called.
Name, email, and phone number may be shared with the external booking provider to complete a reservation.
The documented MCP flow sends customer contact information to an external Lokuli endpoint as part of booking.
https://lokuli.com/mcp/sse ... "customerName": "John Doe", "customerEmail": "john@example.com", "customerPhone": "+13105551234"
Only provide the contact details needed for the booking and use the skill only if you trust the Lokuli MCP service.
Users have limited registry-provided context for verifying who maintains the skill or the linked service.
The registry metadata does not provide an external source or homepage to help verify the publisher or service provenance.
Source: unknown; Homepage: none
Verify the publisher and the lokuli.com endpoint independently before relying on the skill for bookings.