Book Massage
PassAudited by ClawScan on May 10, 2026.
Overview
This is a coherent massage-booking skill, but it can send your contact details to Lokuli and create a real appointment, so users should confirm details before booking.
This skill appears benign and purpose-aligned. Before installing or using it, make sure you are comfortable sharing your booking details with Lokuli, and ask the agent to confirm the provider, service, time, and contact information before creating any appointment.
Findings (2)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
If invoked prematurely, the agent could create an unwanted massage appointment.
The skill includes a tool call that can create a real booking using the user's contact details. This fits the skill's purpose, but should be performed only after the user confirms the provider, service, time, and contact information.
"name": "create_booking" ... "timeSlot": "2025-02-10T14:00:00-08:00", "customerName": "John Doe", "customerEmail": "john@example.com", "customerPhone": "+13105551234"
Confirm the chosen provider, service, time, price or cancellation terms if available, and contact details before allowing the booking call.
Your name, email, phone number, location or ZIP code, and appointment preferences may be shared with Lokuli when booking.
The skill routes search, availability, and booking requests through an external MCP endpoint. That is disclosed and purpose-aligned, but users should understand that booking details may be sent to the remote service.
https://lokuli.com/mcp/sse ... Transport: SSE | JSON-RPC 2.0 | POST requests
Use only contact information you are comfortable sharing with the booking provider, and review the booking details before submission.