Book Flooring
v1.0.1Book flooring services through Lokuli MCP. Use when user needs to find and book flooring. Triggers on requests like "book a flooring", "find flooring near me", or any flooring service request.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description (book flooring via Lokuli MCP) matches the SKILL.md: the runtime instructions show JSON-RPC calls (search, check_availability, create_booking) to an MCP endpoint. There are no unrelated environment variables, binaries, or installers requested.
Instruction Scope
The SKILL.md confines actions to calling the Lokuli MCP SSE endpoint using the declared tool calls. It does not instruct the agent to read local files, other environment variables, or system state. Note: booking calls will send customer data (name, email, phone) to the external endpoint — that is expected for this purpose.
Install Mechanism
There is no install spec and no code files; the skill is instruction-only so nothing will be written to disk by an installer.
Credentials
The skill declares no required credentials or environment variables. That is proportionate if Lokuli's MCP accepts unauthenticated requests, but if the service requires API keys/tokens the SKILL.md is incomplete. Also, the skill will transmit user PII (name, email, phone) to https://lokuli.com — users should expect that and verify the service's privacy/trustworthiness before sending real personal data.
Persistence & Privilege
The skill is not always-enabled and uses normal autonomous invocation defaults. It does not request system-wide config changes or persistent privileges.
Assessment
This skill appears coherent for booking flooring via Lokuli's MCP, but take these precautions before installing or using it:
- Source check: the skill’s source and homepage are unknown — verify the vendor (lokuli.com) and that you trust it.
- Data privacy: booking calls will send customer name, email, phone, and address/zip to the external endpoint. Avoid sending sensitive PII until you confirm how Lokuli handles data.
- Missing credentials: no API key is requested; if the service actually requires authentication this SKILL.md is incomplete — that could cause failures or unexpected behavior.
- Test safely: try with dummy data first to confirm what is transmitted and the booking flow. If you’re uncomfortable, don’t provide real contact details.
- If you need higher assurance, ask the skill author for a homepage, documentation, or a publisher identity before enabling it.Like a lobster shell, security has layers — review code before you run it.
latest
uook flooring
Book flooring services through Lokuli's MCP server.
MCP Endpoint
https://lokuli.com/mcp/sse
Transport: SSE | JSON-RPC 2.0 | POST requests
Tools
search
{
"method": "tools/call",
"params": {
"name": "search",
"arguments": {
"query": "flooring",
"zipCode": "90640",
"maxResults": 20
}
}
}
check_availability
{
"method": "tools/call",
"params": {
"name": "check_availability",
"arguments": {
"providerId": "xxx",
"serviceId": "yyy",
"date": "2025-02-10"
}
}
}
create_booking
{
"method": "tools/call",
"params": {
"name": "create_booking",
"arguments": {
"providerId": "xxx",
"serviceId": "yyy",
"timeSlot": "2025-02-10T14:00:00-08:00",
"customerName": "John Doe",
"customerEmail": "john@example.com",
"customerPhone": "+13105551234"
}
}
}
Comments
Loading comments...
