Book Florist

PassAudited by ClawScan on May 10, 2026.

Overview

This is a simple instruction-only florist booking skill, but it uses an external Lokuli MCP service that can receive contact details and create a booking.

This skill appears coherent and purpose-aligned. Before using it, make sure the agent confirms the florist, service, date and time, price, cancellation policy, and contact details before creating a booking, since your information will be sent to Lokuli's external MCP service.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Note

ASI02: Tool Misuse and Exploitation

What this means

A florist appointment could be booked using the user's contact information.

Why it was flagged

The documented tool can create an actual service booking using customer contact details. This is aligned with the skill purpose, but it is a real-world action the user should confirm before execution.

Skill content

"name": "create_booking", "arguments": { "providerId": "xxx", "serviceId": "yyy", "timeSlot": "2025-02-10T14:00:00-08:00", "customerName": "John Doe", "customerEmail": "john@example.com", "customerPhone": "+13105551234" }

Recommendation

Only allow create_booking after confirming the provider, service, time, contact details, price, and cancellation terms with the user.

Note

ASI07: Insecure Inter-Agent Communication

What this means

Search location and booking contact details may be shared with Lokuli's MCP service and downstream florist providers.

Why it was flagged

The skill routes searches, availability checks, and bookings through an external MCP endpoint. This is disclosed and purpose-aligned, but user details may be sent to that service.

Skill content

## MCP Endpoint

```
https://lokuli.com/mcp/sse
```

Transport: SSE | JSON-RPC 2.0 | POST requests

Recommendation

Share only the information necessary to search or book, and avoid sending unrelated private details.

Note

ASI04: Agentic Supply Chain Vulnerabilities

What this means

Users have less independent information for verifying who maintains the skill or the remote service integration.

Why it was flagged

The registry metadata does not provide a source repository or homepage. There is no local code to inspect, but users have limited provenance information for the skill and its remote integration.

Skill content

Source: unknown; Homepage: none

Recommendation

Prefer using this skill only when you trust the Lokuli endpoint and can verify booking details before committing.