Book Math Tutor

PassAudited by ClawScan on May 10, 2026.

Overview

This is a straightforward booking connector, but it can send your contact details to Lokuli and create a real tutor booking, so confirm details before using the booking step.

This skill appears purpose-aligned and does not install code locally. Before using it, confirm the tutor, time slot, contact information, and any cost or cancellation terms, and only proceed if you are comfortable sending those details to Lokuli.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

A mistaken or premature booking could reserve the wrong tutor, time, or contact information.

Why it was flagged

The skill exposes a tool call that can create a real service booking and submit customer contact details. This matches the stated booking purpose, but it is a consequential action that should be confirmed by the user.

Skill content
"name": "create_booking", "arguments": { "providerId": "xxx", "serviceId": "yyy", "timeSlot": "2025-02-10T14:00:00-08:00", "customerName": "John Doe", "customerEmail": "john@example.com", "customerPhone": "+13105551234" }
Recommendation

Before calling create_booking, confirm the provider, service, time slot, user contact details, price if available, and cancellation policy.

What this means

Search terms, location/ZIP information, and booking contact details may be sent to Lokuli's external service.

Why it was flagged

The skill communicates with an external MCP server, and the documented booking request includes customer name, email, and phone. This data flow is expected for a booking service but should be understood by users.

Skill content
MCP Endpoint: https://lokuli.com/mcp/sse ... Transport: SSE | JSON-RPC 2.0 | POST requests
Recommendation

Only provide the information needed to book, and use the skill only if you are comfortable sharing those details with Lokuli.

What this means

Users have limited information to independently verify who operates or maintains the skill and its remote service.

Why it was flagged

The registry metadata does not provide a source repository or homepage for additional verification. There is no local code or install step, so this is a provenance note rather than a concrete unsafe behavior.

Skill content
Source: unknown; Homepage: none
Recommendation

Verify that lokuli.com is the intended provider before sharing personal details or creating a booking.