Book Personal Trainer

PassAudited by ClawScan on May 10, 2026.

Overview

This instruction-only skill is coherent for finding and booking personal trainers, but it can send contact details to an external Lokuli MCP service and create a booking.

This skill appears benign and purpose-aligned. Before installing or using it, make sure you are comfortable sending your contact details to Lokuli and confirm all appointment details before the agent creates a booking.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If used without careful confirmation, the agent could schedule an appointment the user did not intend to finalize.

Why it was flagged

The skill includes a tool call that can create an actual booking, which is expected for this skill but should be user-confirmed.

Skill content
"name": "create_booking", "arguments": { "providerId": "xxx", "serviceId": "yyy", "timeSlot": "2025-02-10T14:00:00-08:00"
Recommendation

Confirm the provider, service, date, time, and any cancellation or payment implications before allowing a booking call.

What this means

The user’s name, email, phone number, and booking preference may be sent to Lokuli’s MCP service.

Why it was flagged

The skill discloses an external MCP endpoint and shows booking requests containing personal contact information.

Skill content
https://lokuli.com/mcp/sse ... "customerName": "John Doe", "customerEmail": "john@example.com", "customerPhone": "+13105551234"
Recommendation

Only provide the contact information needed for the booking and verify that the user is comfortable sharing it with Lokuli.

What this means

Users have less information for independently verifying who maintains the skill or the linked service.

Why it was flagged

The skill has limited provenance metadata, which matters because it directs the agent to use an external MCP service, though no installable code is present.

Skill content
Source: unknown; Homepage: none
Recommendation

Use the skill only if you trust Lokuli and the registry publisher, and avoid sharing unnecessary personal information.