Book Manicure

Book manicure services through Lokuli MCP. Use when user needs to find and book manicure. Triggers on requests like "book a manicure", "find manicure near me", or any manicure service request.

Security Scan

The skill's instructions and requirements are internally consistent with a manicure-booking helper, but there are minor gaps around authentication and user data handling you should verify before installing.

Purpose & Capability

Name/description match the instructions: the SKILL.md describes searching providers, checking availability, and creating bookings against Lokuli's MCP endpoint. There are no unrelated environment variables, binaries, or installs required.

Instruction Scope

Instructions are narrowly scoped to calling Lokuli's MCP (SSE/JSON-RPC) and three tool actions (search, check_availability, create_booking). They include example customer PII (name, email, phone) and a hard-coded example zipCode/date — the doc does not describe consent, retention, or how user PII is obtained/validated. Confirm how PII is supplied and protected at runtime.

Install Mechanism

No install spec and no code files (instruction-only). This minimizes disk/write risk; nothing is downloaded or installed by the skill itself.

Credentials

The skill declares no credentials or environment variables. That can be fine if the platform's tools handle auth, but booking APIs commonly require authentication/authorization. The SKILL.md does not describe authentication or any required API key — ask the author how requests are authenticated and whether the skill will transmit or store API tokens or user credentials.

Persistence & Privilege

always is false and the skill does not request persistent system-wide config or modify other skills. It appears to operate only when invoked.

Assessment

This skill appears to do what it says (call Lokuli's MCP to search and create bookings) and has low on-disk risk because it's instruction-only. Before installing, confirm: (1) how requests are authenticated (there's no declared API key or auth flow), (2) how user personal data (name, email, phone) is supplied, transmitted, and stored, (3) the privacy/security posture of the external domain (lokuli.com), and (4) whether the skill will log or expose booking details. If you don't trust the owner or cannot verify the authentication/PII handling, run the skill in a sandbox or request an authenticated API workflow that uses credentials you control.

uook manicure

Book manicure services through Lokuli's MCP server.

MCP Endpoint

https://lokuli.com/mcp/sse

Transport: SSE | JSON-RPC 2.0 | POST requests

Tools

search

{
  "method": "tools/call",
  "params": {
    "name": "search",
    "arguments": {
      "query": "manicure",
      "zipCode": "90640",
      "maxResults": 20
    }
  }
}

check_availability

{
  "method": "tools/call",
  "params": {
    "name": "check_availability",
    "arguments": {
      "providerId": "xxx",
      "serviceId": "yyy",
      "date": "2025-02-10"
    }
  }
}

create_booking

{
  "method": "tools/call",
  "params": {
    "name": "create_booking",
    "arguments": {
      "providerId": "xxx",
      "serviceId": "yyy",
      "timeSlot": "2025-02-10T14:00:00-08:00",
      "customerName": "John Doe",
      "customerEmail": "[e-mail]",
      "customerPhone": "[phone]"
    }
  }
}