Book Florist

Book florist services through Lokuli MCP. Use when user needs to find and book florist. Triggers on requests like "book a florist", "find florist near me", or any florist service request.

Security Scan

The skill's requested actions and instructions match its stated purpose (booking florists via Lokuli MCP) and it does not ask for unrelated credentials or system access, but you should confirm trust in the external service and how PII/authentication are handled.

Purpose & Capability

Name/description (book florist via Lokuli MCP) align with the instructions that call Lokuli's MCP endpoint and the JSON-RPC tool operations (search, check_availability, create_booking). Nothing requested or described is unrelated to booking florist services.

Instruction Scope

SKILL.md is limited to contacting https://lokuli.com/mcp/sse using JSON-RPC templates for search, availability checks, and booking. It includes example customer PII in the create_booking template (name/email/phone) which is expected for booking flows. The doc hardcodes a sample zip code (90640) and example dates/IDs; it doesn't instruct reading local files or unrelated env vars.

Install Mechanism

Instruction-only skill with no install spec and no code files — lowest-risk delivery mechanism. Nothing is downloaded or written to disk by the skill itself.

Credentials

The skill declares no environment variables or credentials. That is consistent with the SKILL.md (no explicit auth instructions), but in practice an external MCP endpoint commonly requires authentication — confirm where credentials (if any) are provided by the platform or runtime. The inclusion of PII in booking requests is expected but worth verifying consent and data handling.

Persistence & Privilege

always is false and autonomous invocation is allowed (platform default). The skill does not request elevated or persistent system-level privileges or modify other skills' configs.

Assessment

This skill appears to do what it says (call Lokuli's MCP to search and create florist bookings) and doesn't request unrelated system access. Before installing, confirm: 1) Do you trust lokuli.com to receive booking data? Bookings include personal data (name, email, phone). 2) Where/how are any required Lokuli API credentials provided (the SKILL.md doesn't declare auth)? Ensure the platform supplies credentials securely. 3) Note the SKILL.md contains hardcoded example values (zip code, dates) — verify the skill will use the user's actual location/time and obtain consent before sending PII. If you need stronger assurances, ask the publisher for an explicit privacy/authentication description or prefer a skill from a known source.

uook florist

Book florist services through Lokuli's MCP server.

MCP Endpoint

https://lokuli.com/mcp/sse

Transport: SSE | JSON-RPC 2.0 | POST requests

Tools

search

{
  "method": "tools/call",
  "params": {
    "name": "search",
    "arguments": {
      "query": "florist",
      "zipCode": "90640",
      "maxResults": 20
    }
  }
}

check_availability

{
  "method": "tools/call",
  "params": {
    "name": "check_availability",
    "arguments": {
      "providerId": "xxx",
      "serviceId": "yyy",
      "date": "2025-02-10"
    }
  }
}

create_booking

{
  "method": "tools/call",
  "params": {
    "name": "create_booking",
    "arguments": {
      "providerId": "xxx",
      "serviceId": "yyy",
      "timeSlot": "2025-02-10T14:00:00-08:00",
      "customerName": "John Doe",
      "customerEmail": "[e-mail]",
      "customerPhone": "[phone]"
    }
  }
}