Book Painter

ReviewAudited by ClawScan on May 10, 2026.

Overview

The skill matches its stated purpose, but it can create a real painter booking and send contact details to an external MCP service without documented confirmation or scope safeguards.

Review this skill before installing. It appears intended for booking painters, but you should only allow it to create a booking after you have confirmed the provider, date, time, expected cost, cancellation terms, and the exact personal contact details that will be sent.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Medium

#ASI02: Tool Misuse and Exploitation

What this means

An agent using this skill could book a painter or send personal contact information before the user has clearly approved the final details.

Why it was flagged

The skill documents a tool call that can create a real external service booking using customer contact details, but the artifact does not specify that the agent must get explicit final confirmation or verify price, cancellation terms, provider, and time before calling it.

Skill content

"name": "create_booking", "arguments": { "providerId": "xxx", "serviceId": "yyy", "timeSlot": "2025-02-10T14:00:00-08:00", "customerName": "John Doe", "customerEmail": "john@example.com", "customerPhone": "+13105551234" }

Recommendation

Require an explicit user confirmation step before create_booking, including provider, service, time, price or estimate, cancellation policy, and the exact contact information to be sent.

Low

#ASI07: Insecure Inter-Agent Communication

What this means

Booking details and contact information may be transmitted to Lokuli and potentially to service providers.

Why it was flagged

The skill routes tool calls through an external MCP endpoint, and the booking example includes customer name, email, and phone. This is aligned with the booking purpose, but it is a sensitive third-party data flow users should understand.

Skill content

MCP Endpoint: https://lokuli.com/mcp/sse ... Transport: SSE | JSON-RPC 2.0 | POST requests

Recommendation

Tell users before sending contact information to the MCP service and only transmit the minimum details needed for the selected booking.