Book Gutter Cleaning

ReviewAudited by ClawScan on May 10, 2026.

Overview

The skill is aligned with booking gutter cleaning, but it can create a real booking and send contact details to an external MCP without documented confirmation safeguards.

Before installing, confirm you trust Lokuli and make sure the agent asks for your explicit approval before creating any booking or sending your name, email, and phone number.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The agent could make an appointment with a service provider before the user has clearly confirmed the provider, time, cost, or cancellation terms.

Why it was flagged

The skill documents a tool that can create an external service booking using the user's contact information. The artifact does not include guardrails requiring explicit final confirmation before this mutating action.

Skill content
"name": "create_booking" ... "timeSlot": "2025-02-10T14:00:00-08:00", "customerName": "John Doe", "customerEmail": "john@example.com", "customerPhone": "+13105551234"
Recommendation

Require an explicit confirmation step before create_booking, including provider name, selected service, appointment time, price if available, cancellation terms, and the exact contact details to submit.

What this means

Your name, email, phone number, and selected appointment details may be transmitted to Lokuli's MCP service to complete a booking.

Why it was flagged

The skill uses an external MCP endpoint and sends customer contact details during booking. This is purpose-aligned, but users should understand that their personal information is being shared with that service.

Skill content
https://lokuli.com/mcp/sse ... "customerName": "John Doe", "customerEmail": "john@example.com", "customerPhone": "+13105551234"
Recommendation

Submit only the information needed for the booking and verify that the destination service and provider are trusted before sharing personal contact details.

What this means

It may be harder to verify who operates or maintains the integration before trusting it with booking actions.

Why it was flagged

The skill has no supplied source or homepage metadata. There is no code to install, so this is not by itself unsafe, but provenance is limited for a skill that relies on an external service.

Skill content
Source: unknown; Homepage: none
Recommendation

Verify the Lokuli service independently before using the skill for real bookings.