Book Gutter Cleaning
v1.0.1Book gutter-cleaning services through Lokuli MCP. Use when user needs to find and book gutter-cleaning. Triggers on requests like "book a gutter-cleaning", "find gutter-cleaning near me", or any gutter-cleaning service request.
Security Scan
OpenClaw
Suspicious
medium confidencePurpose & Capability
Name/description and the SKILL.md consistently describe booking gutter-cleaning via Lokuli's MCP endpoint and provide JSON-RPC tool call examples (search, check_availability, create_booking). The declared capabilities align with the stated purpose.
Instruction Scope
SKILL.md is narrowly scoped to calling Lokuli's MCP (SSE/JSON-RPC). It does not instruct reading local files or unrelated system state. However, the examples include hardcoded values (zipCode: 90640, example customerName/email/phone, fixed dates) instead of describing how to obtain the user's real location and contact details, which is ambiguous and could cause the agent to send sample or incorrect PII if not handled explicitly.
Install Mechanism
Instruction-only skill with no install spec and no code files — minimal disk footprint and lower install risk.
Credentials
The SKILL.md references an external MCP endpoint (https://lokuli.com/mcp/sse) but the skill declares no required environment variables or credentials. Booking APIs normally require authentication; absence of any declared credential is unexplained. This could mean the skill expects the platform to supply auth via its tools layer (tools/call) — which is plausible — but the skill should document that requirement. Also, because booking involves user PII (name, email, phone), the skill should explicitly state how that data is collected, validated, and transmitted.
Persistence & Privilege
always is false and there is no install or config writing. The skill does not request persistent or elevated privileges.
What to consider before installing
Before installing, confirm how the agent/platform authenticates to Lokuli (is there a platform-managed token or must you provide credentials?). Ask the skill author or owner: (1) where do user-specific fields (zip code, name, email, phone) come from at runtime — will the agent prompt the user or will it use hardcoded defaults? (2) Is Lokuli a trusted domain for your environment and does it have a privacy policy for handling PII? (3) Are requests to https://lokuli.com/mcp/sse sent over TLS and authenticated by the platform tool layer? If you cannot get clear answers, test the skill in a sandboxed agent and monitor outbound calls to ensure it does not send PII or use unexpected credentials. Finally, prefer skills that explicitly declare required environment variables (API tokens) and how user data is handled.Like a lobster shell, security has layers — review code before you run it.
latest
uook gutter cleaning
Book gutter-cleaning services through Lokuli's MCP server.
MCP Endpoint
https://lokuli.com/mcp/sse
Transport: SSE | JSON-RPC 2.0 | POST requests
Tools
search
{
"method": "tools/call",
"params": {
"name": "search",
"arguments": {
"query": "gutter-cleaning",
"zipCode": "90640",
"maxResults": 20
}
}
}
check_availability
{
"method": "tools/call",
"params": {
"name": "check_availability",
"arguments": {
"providerId": "xxx",
"serviceId": "yyy",
"date": "2025-02-10"
}
}
}
create_booking
{
"method": "tools/call",
"params": {
"name": "create_booking",
"arguments": {
"providerId": "xxx",
"serviceId": "yyy",
"timeSlot": "2025-02-10T14:00:00-08:00",
"customerName": "John Doe",
"customerEmail": "john@example.com",
"customerPhone": "+13105551234"
}
}
}
Comments
Loading comments...
