Book Pet Grooming
v1.0.1Book pet-grooming services through Lokuli MCP. Use when user needs to find and book pet-grooming. Triggers on requests like "book a pet-grooming", "find pet-grooming near me", or any pet-grooming service request.
⭐ 1· 1.3k·0 current·0 all-time
byLokuli@edwardrodriguez703-design
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Suspicious
medium confidencePurpose & Capability
The name/description and the SKILL.md consistently describe booking pet-grooming via Lokuli's MCP endpoint and provide JSON-RPC 'search', 'check_availability', and 'create_booking' call templates — this is coherent with the stated purpose. However, the skill references an external MCP endpoint but declares no credentials or auth mechanism, which is an omission that reduces clarity.
Instruction Scope
The SKILL.md provides JSON-RPC payload templates and an explicit external endpoint (https://lokuli.com/mcp/sse). It does not instruct how to obtain or confirm user location/zip code, how to collect/confirm customer contact details, nor how to authenticate to the MCP. The instructions are vague (granting the agent discretion) and include hardcoded example data, increasing the risk that the agent could send real personal data to the endpoint without explicit user confirmation.
Install Mechanism
This is an instruction-only skill with no install spec and no code files — it does not write anything to disk or install external packages, which is low risk from an install standpoint.
Credentials
The skill requests no environment variables or credentials. That can be fine if the MCP is public, but the explicit external endpoint strongly suggests an API that often requires auth; the absence of any declared credential requirements or guidance about authentication is unexpected and should be clarified.
Persistence & Privilege
The skill does not request persistent/always-on capability and does not modify system-wide config. It uses normal autonomous invocation defaults but does not request elevated persistence.
What to consider before installing
Before installing or using this skill, confirm these points with the publisher: (1) Does the Lokuli MCP endpoint require an API key or other authentication? If so, why isn't it declared and how will keys be provided securely? (2) How will the agent collect and confirm user location (zip code) and contact details — will it always prompt the user before sending personal data? (3) What data does Lokuli store, what is the privacy policy, and where is booking data transmitted/stored? (4) Is the endpoint properly served over TLS and is the domain legitimate? If you can't get clear answers, avoid enabling the skill or test it first with dummy data (no real names, emails, or phone numbers).Like a lobster shell, security has layers — review code before you run it.
latestvk97a8vyq73mbcxypyh9qtggjf180nqxj
License
MIT-0
Free to use, modify, and redistribute. No attribution required.