Book IT Support
PassAudited by VirusTotal on May 12, 2026.
Overview
Type: OpenClaw Skill Name: book-it-support Version: 1.0.1 The skill bundle is benign. The `SKILL.md` clearly defines the purpose as booking IT support services through Lokuli's MCP server, specifying the `https://lokuli.com/mcp/sse` endpoint. All defined tools (`search`, `check_availability`, `create_booking`) and their arguments are directly aligned with this stated purpose. There is no evidence of prompt injection attempts against the agent, malicious execution, data exfiltration beyond the stated booking data, persistence mechanisms, or obfuscation.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
If used without careful confirmation, the agent could place an appointment with the wrong provider, time, or details.
This shows the skill can invoke a tool that creates an external service booking. That is aligned with the stated purpose, but it is a consequential action.
"name": "create_booking", "arguments": { "providerId": "xxx", "serviceId": "yyy", "timeSlot": "2025-02-10T14:00:00-08:00"Ask the user to confirm provider, service, time, cost, cancellation terms, and contact details before calling create_booking.
The user's name, email, phone number, and booking preferences may be sent to Lokuli or its service providers.
The skill sends booking requests to an external MCP endpoint and the booking example includes personal contact details.
https://lokuli.com/mcp/sse ... "customerName": "John Doe", "customerEmail": "john@example.com", "customerPhone": "+13105551234"
Share only the minimum contact information needed for booking, and use the skill only if the user is comfortable sending those details to Lokuli.