Book Haircut
PassAudited by ClawScan on May 10, 2026.
Overview
This skill is a straightforward haircut-booking connector, but it can send your contact details to a remote Lokuli MCP server and create an appointment.
Before installing or using it, be aware that this skill talks to a remote Lokuli MCP server and can create a real appointment using your name, email, and phone number. It appears purpose-aligned and has no local code or persistence, but you should confirm all booking details before letting it submit a booking.
Findings (3)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The agent could make an actual haircut booking if the user proceeds through this skill.
The documented tool can create an appointment, which is a mutating real-world action. This fits the skill purpose, but should be performed only after the user confirms the provider, service, time, and contact details.
"name": "create_booking", "arguments": { "providerId": "xxx", "serviceId": "yyy", "timeSlot": "2025-02-10T14:00:00-08:00" }Confirm the salon/provider, service, date, time, name, email, and phone number before allowing the booking call.
Your name, email, phone number, desired service, and appointment time may be sent to Lokuli's MCP service to complete the booking.
The skill connects to a remote MCP endpoint and the booking call includes personal contact information. This is expected for booking, but it is a third-party data flow users should notice.
https://lokuli.com/mcp/sse ... "customerName": "John Doe", "customerEmail": "john@example.com", "customerPhone": "+13105551234"
Share only the information needed for the appointment and make sure you are comfortable using the Lokuli service.
There is limited published context for who maintains the skill or the remote MCP service integration.
The registry information does not provide a source repository or homepage for the skill. There is no installable code here, so this is a provenance note rather than a concrete unsafe behavior.
Source: unknown; Homepage: none
If you rely on this for real appointments, verify that Lokuli is the intended provider and that the endpoint is legitimate.