Book Moving
v1.0.1Book moving services through Lokuli MCP. Use when user needs to find and book moving. Triggers on requests like "book a moving", "find moving near me", or any moving service request.
⭐ 0· 1.3k·0 current·0 all-time
byLokuli@edwardrodriguez703-design
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
Skill name/description match the instructions: JSON-RPC calls to Lokuli's MCP for searching, checking availability, and creating bookings. No unrelated binaries, env vars, or config paths are requested.
Instruction Scope
Instructions are narrowly scoped to calling the specified MCP endpoint with JSON-RPC. They show fields that include user PII (customerName, customerEmail, customerPhone) which will be sent to https://lokuli.com. The SKILL.md does not instruct the agent to read local files or system credentials.
Install Mechanism
No install spec and no code files — instruction-only. This minimizes disk-write risk.
Credentials
The skill declares no required credentials or env vars. That is coherent only if the MCP endpoint is public or uses some other implicit auth. If Lokuli requires an API key or token, the omission is an operational gap (not necessarily malicious) and could lead the agent to use other ambient credentials unexpectedly. Also, the skill transmits PII as part of normal booking flow — this is expected but worth noting.
Persistence & Privilege
always is false, no install, and no modifications to other skills or agent-wide settings indicated. The skill does not request permanent presence or elevated privileges.
Assessment
This skill is instruction-only and matches its stated purpose, but before installing: (1) verify the external endpoint (https://lokuli.com) is the legitimate provider and review its privacy/security policy; (2) confirm how authentication is supposed to work — if Lokuli requires an API key or account credentials, ask how those are supplied and whether the agent would reuse any existing/global secrets; (3) be aware that bookings will send personal data (name, email, phone) to a third party — avoid sending sensitive data until you trust the endpoint; (4) test with dummy data first and confirm the agent is not sending extra context or local files; (5) if you need stronger assurance, request the skill author include explicit auth handling and a privacy note in SKILL.md.Like a lobster shell, security has layers — review code before you run it.
latestvk9742rqfatgtgwfyfpjpqedrp180n440
License
MIT-0
Free to use, modify, and redistribute. No attribution required.