Book Pedicure
v1.0.1Book pedicure services through Lokuli MCP. Use when user needs to find and book pedicure. Triggers on requests like "book a pedicure", "find pedicure near me", or any pedicure service request.
⭐ 0· 1.3k·0 current·0 all-time
byLokuli@edwardrodriguez703-design
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
Name and description match the instructions: SKILL.md describes searching, checking availability, and creating bookings via Lokuli's MCP. There are no unrelated binaries, environment variables, or config paths requested.
Instruction Scope
Instructions show JSON-RPC/SSE calls to an external endpoint (https://lokuli.com/mcp/sse) and example payloads containing customer PII (name, email, phone). This is expected for a booking skill, but it means the agent will transmit user personal data to an external service; the SKILL.md does not detail consent prompts, data handling, or what the MCP returns.
Install Mechanism
No install spec and no code files — instruction-only skills have low disk/write risk.
Credentials
The skill requires no environment variables or credentials, which is coherent if the MCP accepts unauthenticated requests or if the platform mediates auth. However, the SKILL.md does not mention authentication tokens or account linkage; if Lokuli requires auth, the spec is incomplete and the agent may need to collect credentials at runtime.
Persistence & Privilege
always is false and the skill is user-invocable. It does not request persistent privileges or to modify other skills or system-wide settings.
Assessment
This skill appears to do what it says (search and book pedicure services via Lokuli), but before installing consider: 1) It will send personal contact details to https://lokuli.com — only proceed if you trust that domain and understand Lokuli's data handling. 2) The SKILL.md does not mention authentication or account linkage — confirm whether Lokuli requires an API key or user account and how those credentials would be provided and stored. 3) Ensure the agent asks for explicit user confirmation before transmitting PII or making bookings on your behalf. 4) Because the source and homepage are unknown, prefer to verify the skill publisher or test in a restricted environment first. If you need higher assurance, ask the publisher for documentation or an implementation that shows how authentication and consent are handled.Like a lobster shell, security has layers — review code before you run it.
latestvk97520mb49pf4eg3e8eb75zyzx80nckh
License
MIT-0
Free to use, modify, and redistribute. No attribution required.